Unscored CVE-2005-4283 EUVD-2005-4278GHSA-mvjf-gwx8-f39c

Cross-site scripting (XSS) vulnerability in The CITY Shop 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML vi…

Published Dec 16, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in The CITY Shop 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via parameters to the search module, possibly SKey to store.cgi.

References

21728 vdb-entry
http://pridels0.blogspot.com/2005/12/city-shop-xss-vuln.html
ADV-2005-2913 vdb-entry
15897 vdb-entry
18041 third-party-advisory