← Back

Miva

miva

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Miva Merchant
miva_merchant
Htmlscript
htmlscript

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Miva
1Miva Merchant
Apr 16, 2026
Sep 16, 2005
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary web script or HTML via the Customer_Login parameter.
1Miva
1Htmlscript
Apr 16, 2026
Jan 27, 1998
N/A· v4
N/A· v3
5.0 MEDIUM· v2
htmlscript CGI program allows remote read access to files.