Description
Cross-site scripting (XSS) vulnerability in details.cfm in Tradingeye Shop R4 and earlier allows remote attackers to inject arbitrary web script or HTML via the image parameter.
References
- 20736 third-party-advisory
- http://pridels0.blogspot.com/2006/06/tradingeye-shop-r4-xss.html
- tradingeye-image-xss(27202) vdb-entry
- ADV-2006-2424 vdb-entry
- 18526 vdb-entry
- 26637 vdb-entry