osCommerce 4 Cross Site Scripting

Exploit Title: osCommerce 4 - Reflected XSS Exploit Author: CraCkEr Date: 13/11/2023 Vendor: osCommerce ltd. Vendor Homepage: https://www.oscommerce.com/ Software Link: https://demo.oscommerce.com/ Demo Link: https://demo.oscommerce.com/printshop/ Tested on: Windows 11 Home Impact: Manipulate the...

CVE-2023-6296

A vulnerability was found in osCommerce 4. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /catalog/compare of the component Instant Message Handler. The manipulation of the argument compare with the input 40dz4iq"alert1zohkx leads to cross site...

CVE-2023-6296

CVE-2023-6296 - osCommerce 4 Cross-Site Scripting . The issue affects the file /catalog/compare of the Instant Message Handler in osCommerce 4. The input parameter compare (e.g., compare[] with a crafted value like 40dz4iq">zohkx) enables a reflected XSS. Exploitation appears to be remotely po...