Test ID:	1.3.6.1.4.1.25623.1.0.19945
Category:	Web application abuses
Title:	CubeCart < 3.0.4 Multiple XSS Vulnerabilities
Summary:	CubeCart is prone to multiple cross-site scripting (XSS); vulnerabilities due to its failure to properly sanitize user-supplied input of certain variables; to the 'index.php' and 'cart.php' scripts.
Description:	Summary: CubeCart is prone to multiple cross-site scripting (XSS) vulnerabilities due to its failure to properly sanitize user-supplied input of certain variables to the 'index.php' and 'cart.php' scripts. Solution: Update to version 3.0.4 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-3152 BugTraq ID: 14962 http://www.securityfocus.com/bid/14962 http://bugs.cubecart.com/?do=details&id=459 http://lostmon.blogspot.com/2005/09/cubecart-303-multiple-variable-cross.html http://lostmon.blogspot.com/2006/01/cubecart-307-pl1-indexphp-multiple.html http://securitytracker.com/id?1014984 http://securityreason.com/securityalert/35 XForce ISS Database: cubecart-index-script-xss(24177) https://exchange.xforce.ibmcloud.com/vulnerabilities/24177
Copyright	Copyright (C) 2005 Josh Zlatin-Amishav

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.