What’s Vulnerable › Vulnerabilities

CVE-2003-1219

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2003-12-31 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the tep_href_link function in html_output.php for osCommerce before 2.2-MS3 allows remote attackers to inject arbitrary web script or HTML via the osCsid parameter.

Affected products

• Os Commerce: through 2.2_ms2

References

• http://osdir.com/ml/web.oscommerce.cvs/2003-12/msg00024.html
• http://www.oscommerce.com/community/bugs%2C1546
• http://www.securityfocus.com/archive/1/347831
• http://www.securityfocus.com/bid/9238
• http://osdir.com/ml/web.oscommerce.cvs/2003-12/msg00024.html
• http://www.oscommerce.com/community/bugs%2C1546
• http://www.securityfocus.com/archive/1/347831
• http://www.securityfocus.com/bid/9238

Get alerted when CVE-2003-1219 or the next vulnerability affects your stack