CVE-2003-1219

Cross-site scripting (XSS) vulnerability in the tep_href_link function in html_output.php for osCommerce before 2.2-MS3 allows remote attackers to inject arbitrary web script or HTML via the osCsid parameter.

Scoring

CVSS base score
0.03
EPSS probability
0.68%
Published
2005-08-04
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs