CVE-2025-7567 ShopXO header.html cross site scripting

A vulnerability was found in ShopXO up to 6.5.0 and classified as problematic. This issue affects some unknown processing of the file header.html. The manipulation of the argument lang/systemtype leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed t...

CVE-2025-7567 ShopXO header.html cross site scripting

A vulnerability was found in ShopXO up to 6.5.0 and classified as problematic. This issue affects some unknown processing of the file header.html. The manipulation of the argument lang/systemtype leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed t...

CVE-2025-7567 ShopXO header.html cross site scripting

A vulnerability was found in ShopXO up to 6.5.0 and classified as problematic. This issue affects some unknown processing of the file header.html. The manipulation of the argument lang/systemtype leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed t...

ShopXO 代码注入漏洞

ShopXO is an open source enterprise-level open source e-commerce system from ShopXO. Code injection vulnerability exists in ShopXO 6.5.0 and previous versions, the vulnerability stems from improper operation of the parameter lang/systemtype in the file header.html, which may lead to cross-site...

CVE-2025-7567: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in ShopXO up to 6.5.0 and classified as problematic. This issue affects some unknown processing of the file header.html. The manipulation of the argument lang/systemtype leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed t...

CVE-2025-1585: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in otale tale up to 2.0.5. This issue affects the function OptionsService of the file src/main/resources/templates/themes/default/partial/header.html. The manipulation of the argument logourl leads to cross site scripting. The...

CVE-2006-6658: Undefined Security Weakness

Inktomi Search 4.1.4 allows remote attackers to obtain sensitive information via direct requests with missing parameters to 1 help/header.html, 2 thesaurus.html, and 3 topics.html, which leak the installation path in the resulting error message, a related issue to CVE-2006-5970...

Remote file inclusion

PHP remote file inclusion vulnerability in Thumbnail AutoIndex before 2.0 allows remote attackers to execute arbitrary PHP code via 1 README.html or 2 HEADER.html...

CVE-2006-2098: Undefined Security Weakness

PHP remote file inclusion vulnerability in Thumbnail AutoIndex before 2.0 allows remote attackers to execute arbitrary PHP code via 1 README.html or 2 HEADER.html...