CVE-2005-1162

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-05-02 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web script or HTML via the (1) sEmail parameter to owContactUs.asp, (2) bSub parameter to owListProduct.asp, or the (3) Name, (4) Email, or (5) Comment fields in owProductDetail.asp.

Affected products

Oneworldstore: all versions

References

http://marc.info/?l=bugtraq&m=111352017704126&w=2
http://secunia.com/advisories/14969
http://securitytracker.com/id?1013720
http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab
http://www.osvdb.org/15521
http://www.osvdb.org/15522
http://www.osvdb.org/15523
http://www.securityfocus.com/bid/13184
http://www.securityfocus.com/bid/13185
http://www.securityfocus.com/bid/13186
https://exchange.xforce.ibmcloud.com/vulnerabilities/20096
http://marc.info/?l=bugtraq&m=111352017704126&w=2

Get alerted when CVE-2005-1162 or the next vulnerability affects your stack