EUVD-2012-6311

Malware in sbrugna...

CVE-2012-6458: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the SilverStripe e-commerce module 3.0 for SilverStripe CMS allow remote attackers to inject arbitrary web script or HTML via the 1 FirstName, 2 Surname, or 3 Email parameter to code/forms/OrderFormAddress.php; or the 4 FirstName or 5 Surname...

PT-2013-1951

Name of the Vulnerable Software and Affected Versions SilverStripe e-commerce module version 3.0 for SilverStripe CMS Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters, including FirstName, Surname, and Email to...

[SA21604] Drupal E-commerce Module Script Insertion Vulnerabilities

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...