CVE-2009-2587

Multiple cross-site scripting XSS vulnerabilities in DragDropCart allow remote attackers to inject arbitrary web script or HTML via the 1 sid parameter to assets/js/ddcart.php, the 2 prefix parameter to includes/ajax/getstate.php, the search parameter to 3 index.php and 4 search.php, the 5 redire...

CVE-2009-2587

CVE-2009-2587 describes multiple cross-site scripting (XSS) vulnerabilities in DragDropCart. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters in several pages: (1) sid in assets/js/ddcart.php, (2) prefix in includes/ajax/getstate.php, (3) s...

CVE-2009-2587

creationtimestamp| type| source ---|---|--- 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34734 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34730 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34731 2009-07-20...