Description
Cross-site scripting vulnerability search.inetstore in iNETstore Ebusiness Software 2.0 allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter.
References
- ADV-2006-0075 vdb-entry
- http://osvdb.org/ref/22/22251-inetstore.txt
- 22251 vdb-entry
- 20060126 Re: [OSVDB Mods] iNETstore E Commerce Solution - Cross Site Scripting mailing-list
- 18322 third-party-advisory
- 16156 vdb-entry
- 20060127 vendor confirms versions: iNETstore E Commerce Solution - Cross Site Scripting (fwd) mailing-list