{"id": "CVE-2008-3560", "bulletinFamily": "NVD", "title": "CVE-2008-3560", "description": "Cross-site scripting (XSS) vulnerability in kshop_search.php in the Kshop module 2.22 for Xoops allows remote attackers to inject arbitrary web script or HTML via the search parameter.", "published": "2008-08-08T15:41:00", "modified": "2017-08-07T21:31:59", "cvss": {"score": 4.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-3560", "reporter": "NVD", "references": ["http://lostmon.blogspot.com/2008/08/kshop-module-search-variable-and-field.html", "https://exchange.xforce.ibmcloud.com/vulnerabilities/44261", "http://downloads.securityfocus.com/vulnerabilities/exploits/30576.html", "http://www.securityfocus.com/bid/30576"], "cvelist": ["CVE-2008-3560"], "type": "cve", "lastseen": "2017-08-08T11:24:50", "history": [{"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:xoops:kshop_module:2.22"], "cvelist": ["CVE-2008-3560"], "cvss": {"score": 4.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}, "description": "Cross-site scripting (XSS) vulnerability in kshop_search.php in the Kshop module 2.22 for Xoops allows remote attackers to inject arbitrary web script or HTML via the search parameter.", "edition": 1, "enchantments": {}, "hash": "db330daf5a5240bad0eda128618906874e11153b571283f9895d7f93c1d14347", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "6e9bdd2021503689a2ad9254c9cdf2b3", "key": "cvss"}, {"hash": "448975d91212da3c7da6ad83d34e5dc5", "key": "modified"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "648d20fe5bf7ea91b95219d5a856cb47", "key": "description"}, {"hash": "9278431577c090cd888887748b035e2a", "key": "published"}, {"hash": "068804a6db7bf59332d25cfeae70704b", "key": "cpe"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "334880febe00a7b0972dfd3f2837d037", "key": "title"}, {"hash": "12b9016d7e5e95e1b93ef3b91b018f0a", "key": "cvelist"}, {"hash": "02edb978988134fa9ca90b5989d1130f", "key": "references"}, {"hash": "1c517178929d291653bb2658667fdb8b", "key": "href"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-3560", "id": "CVE-2008-3560", "lastseen": "2016-09-03T10:53:04", "modified": "2009-03-18T01:40:43", "objectVersion": "1.2", "published": "2008-08-08T15:41:00", "references": ["http://lostmon.blogspot.com/2008/08/kshop-module-search-variable-and-field.html", "http://downloads.securityfocus.com/vulnerabilities/exploits/30576.html", "http://xforce.iss.net/xforce/xfdb/44261", "http://www.securityfocus.com/bid/30576"], "reporter": "NVD", "scanner": [], "title": "CVE-2008-3560", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T10:53:04"}], "edition": 2, "hashmap": [{"key": "assessment", "hash": "6d3f4796275bb54c21a33b82f399cc6d"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "068804a6db7bf59332d25cfeae70704b"}, {"key": "cvelist", "hash": "12b9016d7e5e95e1b93ef3b91b018f0a"}, {"key": "cvss", "hash": "6e9bdd2021503689a2ad9254c9cdf2b3"}, {"key": "description", "hash": "648d20fe5bf7ea91b95219d5a856cb47"}, {"key": "href", "hash": "1c517178929d291653bb2658667fdb8b"}, {"key": "modified", "hash": "dfd42237717ec835fea91c0b14911184"}, {"key": "published", "hash": "9278431577c090cd888887748b035e2a"}, {"key": "references", "hash": "8e7258371dd73d75690dc28bcd53d174"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "title", "hash": "334880febe00a7b0972dfd3f2837d037"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "f274c67f18accc950c91433b35c10021b8b2481db71b32bd776f9937ee41fbec", "viewCount": 0, "enchantments": {"score": {"value": 4.3, "vector": "NONE", "modified": "2017-08-08T11:24:50"}, "vulnersScore": 4.3}, "objectVersion": "1.3", "cpe": ["cpe:/a:xoops:kshop_module:2.22"], "assessment": {"href": "", "name": "", "system": ""}, "scanner": []}

{"exploitdb": [{"lastseen": "2016-02-03T16:23:36", "osvdbidlist": ["47343"], "_object_types": ["robots.models.exploitdb.ExploitDbBulletin", "robots.models.base.Bulletin"], "references": [], "description": "Kshop 2.22 'kshop_search.php' Cross-Site Scripting Vulnerability. CVE-2008-3560. Webapps exploit for php platform", "reporter": "Lostmon", "published": "2008-08-06T00:00:00", "type": "exploitdb", "title": "Kshop 2.22 - 'kshop_search.php' Cross-Site Scripting Vulnerability", "enchantments": {"score": {"vector": "NONE", "value": 4.3}}, "bulletinFamily": "exploit", "cvelist": ["CVE-2008-3560"], "_object_type": "robots.models.exploitdb.ExploitDbBulletin", "modified": "2008-08-06T00:00:00", "id": "EDB-ID:32190", "href": "https://www.exploit-db.com/exploits/32190/", "sourceData": "source: http://www.securityfocus.com/bid/30576/info\r\n\r\nKshop is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.\r\n\r\nAn attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.\r\n\r\nKshop 2.22 is vulnerable; other versions may also be affected. \r\n\r\n<form action=\"http://www.example.com/modules/kshop/kshop_search.php\" method=\"POST\"> <input type=\"text\" name=\"search\" value=\"Put your XSS Here !!!\"> </form", "cvss": {"score": 4.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}, "sourceHref": "https://www.exploit-db.com/download/32190/"}]}