CVE-2011-4812

Cross-site scripting XSS vulnerability in nowosci.php in BestShopPro allows remote attackers to inject arbitrary web script or HTML via the str parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in nowosci.php in BestShopPro allows remote attackers to inject arbitrary web script or HTML via the str parameter...

CVE-2011-4812

CVE-2011-4812 is described as a Cross-site Scripting (XSS) vulnerability affecting nowosci.php in BestShopPro. The vulnerability is triggered via the str parameter, allowing remote attackers to inject arbitrary web script or HTML. The core affected component appears to be the nowosci.php script i...

BestShopPro SQL Injection / Cross Site Scripting

Exploit Title: BST - BestShopPro nowosci.php Multiple Vulnerabilities Author : CoBRa21 E-Mail : uykucu at windowslive.com Google Dork : "Powered By BST" Script Page : http://www.bst.pl XSS: http://127.0.0.1/nowosci.php?a=1&str=alert/CoBRa21/ HTML: http://127.0.0.1/nowosci.php?a=1&str=CoBRa21 SQL ...

BST (BestShopPro) - nowosci.php Multiple Vulnerabilities

BST BestShopPro - nowosci.php Multiple Vulnerabilities Exploit Title: BST - BestShopPro nowosci.php Multiple Vulnerabilities Author : CoBRa21 E-Mail : uykucu at windowslive.com Google Dork : "Powered By BST" Script Page : http://www.bst.pl XSS: http://127.0.0.1/nowosci.php?a=1&str=alert/CoBRa21/...

BST (BestShopPro) - 'nowosci.php' Multiple Vulnerabilities

Exploit Title: BST - BestShopPro nowosci.php Multiple Vulnerabilities Author : CoBRa21 E-Mail : uykucu at windowslive.com Google Dork : "Powered By BST" Script Page : http://www.bst.pl XSS: http://127.0.0.1/nowosci.php?a=1&str=alert/CoBRa21/ HTML: http://127.0.0.1/nowosci.php?a=1&str=CoBRa21 SQL ...