VULHUB ™

COWS CGI Online Worldweb Shopping is a commercial shopping system which is written in Perl. COWS will run on most Linux and Unix variants as well as Microsoft Windows operating systems. COWS is prone to cross-site scripting attacks. An attacker may exploit this situation by creating a malicious link containing script code. When a legitimate user of the service browses the link, the malicious script code will be executed on the user in the context of the site hosting the vulnerable software. Such attacks may be used to steal cookie-based authentication credentials from legitimate users.

COWS CGI Online Worldweb Shopping is a commercial shopping system which is written in Perl. COWS will run on most Linux and Unix variants as well as Microsoft Windows operating systems. COWS is prone to cross-site scripting attacks. An attacker may exploit this situation by creating a malicious link containing script code. When a legitimate user of the service browses the link, the malicious script code will be executed on the user in the context of the site hosting the vulnerable software. Such attacks may be used to steal cookie-based authentication credentials from legitimate users.