Description
Cross-site scripting (XSS) vulnerability in index.php in iDevCart 1.09 allows remote attackers to inject arbitrary web script or HTML via the SEARCH parameter in a browse action.
References
- idevcart-search-xss(54906) vdb-entry
- http://packetstormsecurity.org/0912-exploits/idevcart-xss.txt
- 61069 vdb-entry
- 37767 third-party-advisory
- 10490 exploit