Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-43705 State: PUBLISHED Published: 2023-09-30T01:46:03.233Z Last Updated: 2024-09-23T17:00:55.324Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "translation_value[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43706 State: PUBLISHED Published: 2023-09-30T01:46:05.990Z Last Updated: 2024-09-23T17:00:30.760Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "email_templates_key" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43707 State: PUBLISHED Published: 2023-09-30T02:01:23.822Z Last Updated: 2024-09-23T16:53:10.479Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "CatalogsPageDescriptionForm[1][name] " parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscomme
Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43708 State: PUBLISHED Published: 2023-09-30T02:01:26.005Z Last Updated: 2024-09-23T16:52:41.805Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "configuration_title[1](MODULE_PAYMENT_SAGE_PAY_SERVER_TEXT_TITLE)" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisorie
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43709 State: PUBLISHED Published: 2023-09-30T02:01:28.590Z Last Updated: 2024-09-23T16:51:21.611Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "configuration_title[1](MODULE)" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com
Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43710 State: PUBLISHED Published: 2023-09-30T02:01:34.341Z Last Updated: 2024-09-23T16:47:26.484Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "configuration_title[1][MODULE_SHIPPING_PERCENT_TEXT_TITLE]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43711 State: PUBLISHED Published: 2023-09-30T02:01:36.823Z Last Updated: 2024-09-23T16:01:16.547Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "admin_firstname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43712 State: PUBLISHED Published: 2023-09-30T20:53:27.041Z Last Updated: 2024-09-23T15:57:18.652Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "access_levels_name" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43713 State: PUBLISHED Published: 2023-09-30T20:53:29.434Z Last Updated: 2024-09-23T15:55:26.642Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability, which allows attackers to inject JS via the "title" parameter, in the "/admin/admin-menu/add-submit" endpoint, which can lead to unauthorized execution of scripts in a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43714 State: PUBLISHED Published: 2023-09-30T20:53:32.686Z Last Updated: 2024-09-23T15:52:04.768Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "SKIP_CART_PAGE_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43715 State: PUBLISHED Published: 2023-09-30T20:53:36.164Z Last Updated: 2024-09-23T15:50:25.069Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "ENTRY_FIRST_NAME_MIN_LENGTH_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommer
rogram Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43716 State: PUBLISHED Published: 2023-09-30T20:53:39.668Z Last Updated: 2024-09-23T15:49:02.497Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MAX_DISPLAY_NEW_PRODUCTS_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.
ram Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43717 State: PUBLISHED Published: 2023-09-30T21:04:21.107Z Last Updated: 2024-09-23T17:05:23.500Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCH_HIGHLIGHT_ENABLE_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.
CVE ID: CVE-2023-43718 State: PUBLISHED Published: 2023-09-30T21:19:49.733Z Last Updated: 2024-09-23T16:38:55.571Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCH_ENABLE_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43719 State: PUBLISHED Published: 2023-09-30T21:19:51.684Z Last Updated: 2024-09-23T16:35:28.613Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "SHIPPING_GENDER_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43720 State: PUBLISHED Published: 2023-09-30T21:19:54.122Z Last Updated: 2024-09-23T16:32:45.835Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "BILLING_GENDER_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43721 State: PUBLISHED Published: 2023-09-30T21:19:56.705Z Last Updated: 2024-09-23T16:30:42.581Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "PACKING_SLIPS_SUMMARY_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com
CVE ID: CVE-2023-43722 State: PUBLISHED Published: 2023-09-30T21:39:22.183Z Last Updated: 2024-09-23T15:47:14.280Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_status_groups_name[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43723 State: PUBLISHED Published: 2023-09-30T21:39:24.507Z Last Updated: 2024-09-23T15:42:22.075Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_status_name[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43724 State: PUBLISHED Published: 2023-09-30T21:39:26.868Z Last Updated: 2024-09-20T20:45:18.371Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "derb6zmklgtjuhh2cn5chn2qjbm2stgmfa4.oastify.comscription[1][name]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisorie
CVE ID: CVE-2023-43725 State: PUBLISHED Published: 2023-09-30T21:39:29.193Z Last Updated: 2024-09-20T19:08:30.408Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_products_status_name_long[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerc
ogram Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43726 State: PUBLISHED Published: 2023-09-30T21:39:32.146Z Last Updated: 2024-09-20T19:03:08.882Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_products_status_manual_name_long[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.os
CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43727 State: PUBLISHED Published: 2023-09-30T21:54:50.111Z Last Updated: 2024-09-20T18:46:56.234Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "stock_indication_text[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43728 State: PUBLISHED Published: 2023-09-30T21:54:51.931Z Last Updated: 2024-09-20T18:45:57.427Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "stock_delivery_terms_text[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43729 State: PUBLISHED Published: 2023-09-30T21:54:54.245Z Last Updated: 2024-09-20T18:44:25.519Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "xsell_type_name[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43730 State: PUBLISHED Published: 2023-09-30T21:54:56.293Z Last Updated: 2024-09-20T18:26:39.517Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "countries_name[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43731 State: PUBLISHED Published: 2023-09-30T21:55:02.197Z Last Updated: 2024-09-20T17:40:56.359Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "zone_name" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43732 State: PUBLISHED Published: 2023-09-30T22:08:42.715Z Last Updated: 2024-09-20T17:34:35.143Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "tax_class_title" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43733 State: PUBLISHED Published: 2023-09-30T22:08:44.735Z Last Updated: 2024-09-20T17:23:58.087Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "company_address" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43734 State: PUBLISHED Published: 2023-09-30T22:08:47.176Z Last Updated: 2024-09-20T17:23:23.073Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "name" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43735 State: PUBLISHED Published: 2023-09-30T22:08:49.377Z Last Updated: 2024-09-20T17:22:35.282Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Os Commerce Products: Os Commerce Problem Types: CWE-79 Description: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "formats_titles[7]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bts/ - https://www.oscommerce.com/
CVE ID: CVE-2023-43737 State: REJECTED Published: 2023-10-26T22:22:03.091Z Last Updated: 2024-01-02T19:10:38.384Z Description: No description available.
CVE ID: CVE-2023-43738 State: REJECTED Published: 2023-10-27T02:04:37.737Z Last Updated: 2024-01-02T19:11:19.509Z Description: No description available.
CVE ID: CVE-2023-43739 State: PUBLISHED Published: 2023-09-28T21:32:55.726Z Last Updated: 2024-09-23T18:47:21.233Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Online Book Store Project Products: Online Book Store Project Problem Types: CWE-89 Description: The 'bookisbn' parameter of the cart.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/filth - https://projectworlds.in/
CVE ID: CVE-2023-43740 State: PUBLISHED Published: 2023-09-28T20:48:22.121Z Last Updated: 2024-09-23T18:07:33.596Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Online Book Store Project Products: Online Book Store Project Problem Types: CWE-434 Description: Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of admin_edit.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/shagrath - https://projectworlds.in/