CVE-2012-4236: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the refreshpage function in application/modules/main/views/top.php in Total Shop UK eCommerce Open Source before 2.1.2p1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

PT-2012-5268

Name of the Vulnerable Software and Affected Versions Total Shop UK eCommerce Open Source versions prior to 2.1.2 p1 Description A cross-site scripting XSS issue exists due to insufficient input validation in the refresh page function. This allows remote attackers to inject arbitrary web script o...

Total Shop UK eCommerce CodeIgniter - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54985/info Total Shop UK eCommerce CodeIgniter is prone to multiple unspecified cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...