← Database

CVE-2007-2968

MEDIUM CVSS: 4.3 Published: 2007-06-01 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in register.php in cpCommerce 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter (Full Name field).

Affected Platforms

Cpcommerce Cpcommerce

Weakness Type

NVD-CWE-Other

References