← Database

CVE-2004-0681

MEDIUM CVSS: 6.8 Published: 2004-08-06 Modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffice_message.asp, (3) comersus_supportError.asp, or (4) comersus_message.asp in Comersus Cart 5.09 allow remote attackers to execute web script as other users via the message parameter.

Affected Platforms

Comersus Open Technologies Comersus Cart

Weakness Type

NVD-CWE-Other

References