← Database

CVE-2008-4745

MEDIUM CVSS: 4.3 Published: 2008-10-27 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in emailFriend.asp in Uniwin eCart Professional 2.0.17 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Platforms

Uniwin Ecart Professional

Weakness Type

CWE-79

References