CVE-2009-2032

2009-06-1217:28:00

mitre

www.cve.org

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

55.7%

JSON

Cross-site scripting (XSS) vulnerability in search.asp in PDshopPro, when downloaded before 20070308, allows remote attackers to inject arbitrary web script or HTML via the search parameter.

References

osvdb.org/55020

packetstorm.linuxsecurity.com/0906-exploits/pdshoppro-xss.txt

secunia.com/advisories/34200