CVE-2004-0675
mcmurtrey whitaker and associates cart32: no CVSS score yet. EPSS 4.2% chance of exploitation in the next 30 days.
Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote attackers to execute arbitrary web script via the cart32 parameter to a GetLatestBuilds command.
- EPSS
- 4.2% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mcmurtrey_whitaker_and_associates:cart32