Description
Cross-site scripting (XSS) vulnerability in search.php in JShop E-Commerce Server allows remote attackers to inject arbitrary web script or HTML via the xSearch parameter.
References
- 3889 vdb-entry
- http://www.systemsecure.org/advisories/ssadvisory09022004.php
- 10825 third-party-advisory
- jshop-searchphp-xss(15100) vdb-entry
- 9609 vdb-entry
- 1008988 vdb-entry