2 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in PHPepperShop 1.4 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php or 2 shop/kontakt.php, or 3 shopkundenmgmt.php or 4 SHOPKONFIGURATION.php in shop/Admin/...
4.3CVSS6.1AI score0.02214EPSS
SaveExploits5References9Affected Software1
CVE-2008-5569: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in PHPepperShop 1.4 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php or 2 shop/kontakt.php, or 3 shopkundenmgmt.php or 4 SHOPKONFIGURATION.php in shop/Admin/...
4.3CVSS5.8AI score0.02214EPSS
SaveExploits5References2
20