4 matches found
CVE-2010-1856
Cross-site scripting XSS vulnerability in index.php in RepairShop2 1.9.023 Trial, when magicquotesgpc is disabled, allows remote attackers to inject arbitrary web script or HTML via the prod parameter in a products.details action...
CVE-2010-1856
CVE-2010-1856 affects RepairShop2 (version 1.9.023 Trial). The vulnerability is a reflected XSS in index.php, exploitable when magic_quotes_gpc is disabled, allowing remote attackers to inject arbitrary script/HTML via the prod parameter in the products.details action. The connected documents con...
CVE-2010-1856
Cross-site scripting XSS vulnerability in index.php in RepairShop2 1.9.023 Trial, when magicquotesgpc is disabled, allows remote attackers to inject arbitrary web script or HTML via the prod parameter in a products.details action...