CVE-2012-2631

Published: Jun 15, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in WEBLOGIC @WEB ShoppingCart before 1.5.2.0, and @WEB ShoppingCart T 1.5.0.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (10)

Products: Atmarkweb: @web Shoppingcart T, @web Shoppingcart

Atmarkweb

2 products

@web Shoppingcart T

@web Shoppingcart

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Atmarkweb @web Shoppingcart T	Up to 1.5.0.1

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Atmarkweb @web Shoppingcart	Up to 1.5.1.0
Atmarkweb @web Shoppingcart	Version 1.1.0.0
Atmarkweb @web Shoppingcart	Version 1.1.1.0
Atmarkweb @web Shoppingcart	Version 1.1.2.0
Atmarkweb @web Shoppingcart	Version 1.2.0.0
Atmarkweb @web Shoppingcart	Version 1.3.0.0
Atmarkweb @web Shoppingcart	Version 1.3.1.0
Atmarkweb @web Shoppingcart	Version 1.3.1.1
Atmarkweb @web Shoppingcart	Version 1.5.0.0