CVE-2014-3830 in TomatoCartinfo

Summary

Cross-site scripting (XSS) vulnerability in info.php in TomatoCart 1.1.8.6.1 allows remote attackers to inject arbitrary web script or HTML via the faqs_id parameter.

Reservation

05/22/2014

Disclosure

10/20/2014

Entries

VulDB provides additional information and datapoints for this CVE:

Interested in the pricing of exploits?

See the underground prices here!