CVE-2005-4530

Description (CNA)

Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Enterprise 3.0 (formerly DoPays) allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters in (1) profile.htm, (2) card.htm, (3) bank.htm, (4) subscriptions.htm, (5) send.htm, (6) request.htm, (7) forgot.htm, (8) escrow.htm, (9) donations.htm, and (10) products.htm.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://www.osvdb.org/21887
• http://www.vupen.com/english/advisories/2005/3074
• http://secunia.com/advisories/18153
• http://www.osvdb.org/21883
• http://www.osvdb.org/21891
• http://www.osvdb.org/21885
• http://www.osvdb.org/21892
• http://www.osvdb.org/21888
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23852
• http://www.securityfocus.com/bid/16055
• http://pridels0.blogspot.com/2005/12/alstrasoft-epay-enterprise-v30-xss.html
• http://www.osvdb.org/21889
• http://www.osvdb.org/21884
• http://www.osvdb.org/21886
• http://www.osvdb.org/21890

ADP enrichment