CVE-2006-3235

This CVE refers to multiple cross-site scripting (XSS) flaws in index.php of FineShop 3.0 and earlier. The vulnerabilities allow remote attackers to inject arbitrary script or HTML via the parameters (1) promocja, (2) wysw, or (3) id_produc. Affected product: FineShop 3.0 and earlier (web applica...