EUVD-2011-5086

Malware in sbrugna...

CVE-2011-5186

CVE-2011-5186 affects the jbShop plugin for e107 7. The vulnerability is a Cross-site Scripting (XSS) in jbshop.php via the item_id parameter, allowing remote attackers to inject arbitrary web script or HTML. Root cause is insufficient input sanitization on that parameter. Exploitation details ar...