CVE-2005-1486

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-05-11 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting vulnerabilities in FishCart 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) trackingnum, (2) reqagree, or (3) m parameter to upstracking.php or (4) nlst parameter to display.php. NOTE: the vendor was not able to reproduce some of the reported vectors but believes that they have been addressed. The original researcher is known to be unreliable.

Affected products

Fishnet Fishcart: 3.1

References

http://marc.info/?l=bugtraq&m=111530799109755&w=2
http://secunia.com/advisories/15232/
http://www.digitalparadox.org/advisories/fishc.txt
http://www.fishcart.org/archives/200505/msg00028.html
http://www.osvdb.org/16280
http://www.osvdb.org/16281
http://www.securityfocus.com/archive/1/457754/100/200/threaded
http://www.securityfocus.com/bid/13499
https://exchange.xforce.ibmcloud.com/vulnerabilities/20384
http://marc.info/?l=bugtraq&m=111530799109755&w=2
http://secunia.com/advisories/15232/
http://www.digitalparadox.org/advisories/fishc.txt

Get alerted when CVE-2005-1486 or the next vulnerability affects your stack