Description
Cross-site scripting (XSS) vulnerability in Products_Results.php in PowerStore 3.0 allows remote attackers to inject arbitrary web script or HTML via the totalRows_WADAProducts parameter.
References
- 41369 third-party-advisory
- powerstore-productsresults-xss(61736) vdb-entry
- 67939 vdb-entry
- http://pridels-team.blogspot.com/2010/09/powerstore-3-xss-vuln.html