Skip to content

CVE-2008-6500

Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote...

4.3 MediumPublic exploit

CVE-2008-6500 is a medium vulnerability (CVSS 4.3) in Codetoad Asp Shopping Cart Script, published March 20, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.44%, the 73rd percentile. No source names a fixed version.

Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI.

Exploit likelihood

1.44%Down 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI.

Record: CVE-2008-6500
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

CVE List No score

Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI.

Record: CVE-2008-6500
Updated: 2026-11-02

EUVDEUVD-2008-6470 No score

Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI.

Record: EUVD-2008-6470
Updated: 2026-11-03

GitHub AdvisoriesGHSA-2w7r-9m4h-c58p No score

Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote...

Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI.

Record: GHSA-2w7r-9m4h-c58p
Weakness: CWE-79
Updated: 2026-11-02

Affected products

codetoad asp shopping cart script

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	CodeToad ASP Shopping Cart Script - Cross-Site Scripting	2008-12-01

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

References