CVE-2005-2191

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-07-11 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Comersus shopping cart allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to comersus_backoffice_listAssignedPricesToCustomer.asp or (2) message parameter to comersus_backoffice_message.asp.

Affected products

Comersus Open Technologies Comersus Cart: all versions

References

http://downloads.securityfocus.com/vulnerabilities/exploits/backoffice_mult_exp.pl
http://marc.info/?l=bugtraq&m=112077057001064&w=2
http://securitytracker.com/id?1014419
http://www.securityfocus.com/bid/15251
http://downloads.securityfocus.com/vulnerabilities/exploits/backoffice_mult_exp.pl
http://marc.info/?l=bugtraq&m=112077057001064&w=2
http://securitytracker.com/id?1014419
http://www.securityfocus.com/bid/15251

Get alerted when CVE-2005-2191 or the next vulnerability affects your stack