CVE-2011-0504

CVE-2011-0504 affects VaM Shop versions 1.6 and 1.6.1 (and possibly earlier). The issue is multiple cross-site scripting (XSS) vulnerabilities caused by insufficient input sanitization in admin/orders.php (parameter: status), admin/customers.php (parameter: search), and admin/configuration.php (p...