3 matches found
CVE-2008-3841: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin/searchlinks.php in Freeway eCommerce 1.4.1.171 allows remote attackers to inject arbitrary web script or HTML via the searchlink parameter...
CVE-2008-3678
CVE-2008-3678 is a cross-site scripting (XSS) vulnerability in Freeway prior to 1.4.2.197, specifically in admin/search_links.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the URL, enabling script execution in the context of the affected user. The public referen...
CVE-2008-3678: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin/searchlinks.php in Freeway before 1.4.2.197 allows remote attackers to inject arbitrary web script or HTML via the URL...