CVE-2009-4856

2010-05-1020:00:00

mitre

www.cve.org

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

56.0%

JSON

Cross-site scripting (XSS) vulnerability in subitems.php in PHP Easy Shopping Cart 3.1R allows remote attackers to inject arbitrary web script or HTML via the name parameter.

References

osvdb.org/56835

packetstormsecurity.org/0908-exploits/pesc-xss.txt

secunia.com/advisories/36168

exchange.xforce.ibmcloud.com/vulnerabilities/52324