CVE-2009-4688

2010-03-1022:00:00

mitre

www.cve.org

php

shopping cart

xss

vulnerabilities

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

58.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Shopping Cart Selling Website Script allow remote attackers to inject arbitrary web script or HTML via the (1) txtkeywords and (2) cid parameters.

References

packetstormsecurity.org/0907-exploits/scsc-sqlxss.txt

secunia.com/advisories/35894

www.vupen.com/english/advisories/2009/1977