CVE-2011-4812

Cross-site scripting XSS vulnerability in nowosci.php in BestShopPro allows remote attackers to inject arbitrary web script or HTML via the str parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in nowosci.php in BestShopPro allows remote attackers to inject arbitrary web script or HTML via the str parameter...

CVE-2011-4812: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in nowosci.php in BestShopPro allows remote attackers to inject arbitrary web script or HTML via the str parameter...

PT-2011-5118

Name of the Vulnerable Software and Affected Versions BestShopPro affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the str parameter in the...

CVE-2011-4812

CVE-2011-4812 is described as a Cross-site Scripting (XSS) vulnerability affecting nowosci.php in BestShopPro. The vulnerability is triggered via the str parameter, allowing remote attackers to inject arbitrary web script or HTML. The core affected component appears to be the nowosci.php script i...

BST (BestShopPro) - 'nowosci.php' Multiple Vulnerabilities

Exploit Title: BST - BestShopPro nowosci.php Multiple Vulnerabilities Author : CoBRa21 E-Mail : uykucu at windowslive.com Google Dork : "Powered By BST" Script Page : http://www.bst.pl XSS: http://127.0.0.1/nowosci.php?a=1&str=alert/CoBRa21/ HTML: http://127.0.0.1/nowosci.php?a=1&str=CoBRa21 SQL ...

BST (BestShopPro) - nowosci.php Multiple Vulnerabilities

BST BestShopPro - nowosci.php Multiple Vulnerabilities Exploit Title: BST - BestShopPro nowosci.php Multiple Vulnerabilities Author : CoBRa21 E-Mail : uykucu at windowslive.com Google Dork : "Powered By BST" Script Page : http://www.bst.pl XSS: http://127.0.0.1/nowosci.php?a=1&str=alert/CoBRa21/...

BestShopPro SQL Injection / Cross Site Scripting

Exploit Title: BST - BestShopPro nowosci.php Multiple Vulnerabilities Author : CoBRa21 E-Mail : uykucu at windowslive.com Google Dork : "Powered By BST" Script Page : http://www.bst.pl XSS: http://127.0.0.1/nowosci.php?a=1&str=alert/CoBRa21/ HTML: http://127.0.0.1/nowosci.php?a=1&str=CoBRa21 SQL ...