CVE-2005-2138

Cross-site scripting (XSS) vulnerability in index.php in Comdev eCommerce 3.0 and 3.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the onMouseOver event of an "A" tag in a review message.

• http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=64Exploit, Vendor Advisory
• http://secunia.com/advisories/15865Vendor Advisory
• http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=64Exploit, Vendor Advisory
• http://secunia.com/advisories/15865Vendor Advisory

Published

Jul 5, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2132RPC portmapper (rpcbind) in SCO UnixWare 7.1.1 m5, 7.1.3 mp5…
• CVE-2005-2133Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2005-2134The (1) clcs and (2) emuxki drivers in NetBSD 1.6 through 2.…
• CVE-2005-2135SQL injection vulnerability in verify.asp in EtoShop Dynamic…
• CVE-2005-2136Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4…
• CVE-2005-2137Unknown vulnerability in NateOn Messenger 3.0 allows remote …
• CVE-2005-2139PHP remote file inclusion vulnerability in user_check.php fo…
• CVE-2005-2140Directory traversal vulnerability in default.asp for FSboard…
• CVE-2005-2141TCP Chat 1.0 allows remote attackers to cause a denial of se…
• CVE-2005-2142Directory traversal vulnerability in Golden FTP Server 2.60 …
• CVE-2005-2143Microsoft Front Page allows attackers to cause a denial of s…
• CVE-2005-2144Prevx Pro 2005 1.0 allows local users to bypass file protect…