CVE-2012-4236

The vulnerability CVE-2012-4236 affects Total Shop UK eCommerce Open Source (CodeIgniter-based) before version 2.1.2_p1. Root cause: the refresh_page function in /application/modules/_main/views/_top.php writes the entire URL (including PATH_INFO) to Javascript without sufficient sanitisation, en...