{"api_version":"1","generated_at":"2026-07-23T06:22:46+00:00","cve":"CVE-2010-3465","urls":{"html":"https://cve.report/CVE-2010-3465","api":"https://cve.report/api/cve/CVE-2010-3465.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-3465","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-3465"},"summary":{"title":"CVE-2010-3465","description":"Multiple cross-site scripting (XSS) vulnerabilities in XSE Shopping Cart 1.5.2.1 and 1.5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to Default.aspx and the (2) type parameter to SearchResults.aspx.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-09-17 20:00:04","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://osvdb.org/68030","name":"http://osvdb.org/68030","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://secunia.com/advisories/41453","name":"http://secunia.com/advisories/41453","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"XSE Shopping Cart \"id\" and \"type\" Cross-Site Scripting Vulnerabilities - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/68029","name":"http://osvdb.org/68029","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/61828","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/61828","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://pridels-team.blogspot.com/2010/09/xse-shopping-cart-xss-vuln.html","name":"http://pridels-team.blogspot.com/2010/09/xse-shopping-cart-xss-vuln.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"-UNSECURED SYSTEMS-: XSE shopping cart  XSS vuln.","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-3465","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3465","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"3465","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ecommercesoft","cpe5":"xse_shopping_cart","cpe6":"1.5.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3465","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ecommercesoft","cpe5":"xse_shopping_cart","cpe6":"1.5.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T03:11:43.926Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"xseshoppingcart-multiple-xss(61828)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/61828"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://pridels-team.blogspot.com/2010/09/xse-shopping-cart-xss-vuln.html"},{"name":"41453","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/41453"},{"name":"68029","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/68029"},{"name":"68030","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/68030"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-09-15T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in XSE Shopping Cart 1.5.2.1 and 1.5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to Default.aspx and the (2) type parameter to SearchResults.aspx."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"xseshoppingcart-multiple-xss(61828)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/61828"},{"tags":["x_refsource_MISC"],"url":"http://pridels-team.blogspot.com/2010/09/xse-shopping-cart-xss-vuln.html"},{"name":"41453","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/41453"},{"name":"68029","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/68029"},{"name":"68030","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/68030"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-3465","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in XSE Shopping Cart 1.5.2.1 and 1.5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to Default.aspx and the (2) type parameter to SearchResults.aspx."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"xseshoppingcart-multiple-xss(61828)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/61828"},{"name":"http://pridels-team.blogspot.com/2010/09/xse-shopping-cart-xss-vuln.html","refsource":"MISC","url":"http://pridels-team.blogspot.com/2010/09/xse-shopping-cart-xss-vuln.html"},{"name":"41453","refsource":"SECUNIA","url":"http://secunia.com/advisories/41453"},{"name":"68029","refsource":"OSVDB","url":"http://osvdb.org/68029"},{"name":"68030","refsource":"OSVDB","url":"http://osvdb.org/68030"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-3465","datePublished":"2010-09-17T19:00:00.000Z","dateReserved":"2010-09-17T00:00:00.000Z","dateUpdated":"2024-08-07T03:11:43.926Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-09-17 20:00:04","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecommercesoft:xse_shopping_cart:1.5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D6C030B9-B972-4C31-ACB1-B0B7044AA425"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecommercesoft:xse_shopping_cart:1.5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"22935A3B-99B3-48CF-8667-A87C77EB2F2D"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"3465","Ordinal":"1","Title":"CVE-2010-3465","CVE":"CVE-2010-3465","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"3465","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in XSE Shopping Cart 1.5.2.1 and 1.5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to Default.aspx and the (2) type parameter to SearchResults.aspx.","Type":"Description","Title":"CVE-2010-3465"},{"CveYear":"2010","CveId":"3465","Ordinal":"2","NoteData":"2010-09-17","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"3465","Ordinal":"3","NoteData":"2017-08-16","Type":"Other","Title":"Modified"}]}}}