CVE-2004-0681: Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comer...

Security readout for executives and security teams

CVE-2004-0681 is an old cross-site scripting issue in Comersus Cart 5.09. A remote attacker could cause script to run in another user’s browser through the message parameter. Business impact depends on whether the cart is still exposed and whether users with privileged sessions access affected pages. Exposure is likely limited to legacy Comersus Cart 5.09 deployments or retained copies of the named ASP pages. Internet-facing storefront or back-office pages raise risk, especially where administrator sessions may view attacker-controlled messages. Prioritize inventory first. If Comersus Cart 5.09 is not present, business risk is minimal. If exposed, move quickly to retire, isolate, or obtain vendor-supported remediation because the issue affects user trust and potentially administrator sessions. Mitigation focus: Inventory systems for Comersus Cart 5.09 and the named ASP files.; Check vendor or maintainer guidance for a fixed release or official workaround.; Retire or isolate unsupported Comersus Cart deployments from public access..

Prepared

Jun 30, 2026, 04:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.