Description
Cross-site scripting (XSS) vulnerability in search.asp in PDshopPro, when downloaded before 20070308, allows remote attackers to inject arbitrary web script or HTML via the search parameter.
References
- 55020 vdb-entry
- 34200 third-party-advisory
- http://packetstorm.linuxsecurity.com/0906-exploits/pdshoppro-xss.txt