ByteOS Network

NVD Vulnerability Details :

CVE-2010-1541

Deferred

Source-cve@mitre.org

Published At-26 Apr, 2010 | 19:30

Updated At-11 Apr, 2025 | 00:51

Multiple cross-site scripting (XSS) vulnerabilities in DFD Cart 1.198, 1.197, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) category and (2) list_quantity parameters to index.php, and the (3) category parameter to your.order.php.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N

CPE Matches

dragonfrugal>>dfd_cart>>Versions up to 1.198(inclusive)

cpe:2.3:a:dragonfrugal:dfd_cart:*:*:*:*:*:*:*:*

dragonfrugal>>dfd_cart>>1.1.4

cpe:2.3:a:dragonfrugal:dfd_cart:1.1.4:*:*:*:*:*:*:*

dragonfrugal>>dfd_cart>>1.1.5

cpe:2.3:a:dragonfrugal:dfd_cart:1.1.5:*:*:*:*:*:*:*

dragonfrugal>>dfd_cart>>1.1.6

cpe:2.3:a:dragonfrugal:dfd_cart:1.1.6:*:*:*:*:*:*:*

dragonfrugal>>dfd_cart>>1.1.7

cpe:2.3:a:dragonfrugal:dfd_cart:1.1.7:*:*:*:*:*:*:*

dragonfrugal>>dfd_cart>>1.1.8

cpe:2.3:a:dragonfrugal:dfd_cart:1.1.8:*:*:*:*:*:*:*

dragonfrugal>>dfd_cart>>1.192

cpe:2.3:a:dragonfrugal:dfd_cart:1.192:*:*:*:*:*:*:*

dragonfrugal>>dfd_cart>>1.193

cpe:2.3:a:dragonfrugal:dfd_cart:1.193:*:*:*:*:*:*:*

dragonfrugal>>dfd_cart>>1.194

cpe:2.3:a:dragonfrugal:dfd_cart:1.194:*:*:*:*:*:*:*

dragonfrugal>>dfd_cart>>1.195

cpe:2.3:a:dragonfrugal:dfd_cart:1.195:*:*:*:*:*:*:*

dragonfrugal>>dfd_cart>>1.196

cpe:2.3:a:dragonfrugal:dfd_cart:1.196:*:*:*:*:*:*:*

dragonfrugal>>dfd_cart>>1.197

cpe:2.3:a:dragonfrugal:dfd_cart:1.197:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://holisticinfosec.org/content/view/135/45/	cve@mitre.org	N/A
http://osvdb.org/62671	cve@mitre.org	N/A
http://osvdb.org/62672	cve@mitre.org	N/A
http://secunia.com/advisories/38635	cve@mitre.org	Vendor Advisory
http://www.securityfocus.com/bid/38505	cve@mitre.org	N/A
http://holisticinfosec.org/content/view/135/45/	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/62671	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/62672	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/38635	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securityfocus.com/bid/38505	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History