barcode-automation.com XSS vulnerability

Vulnerable URL: http://www.barcode-automation.com/decal-sample.php?stripe=black=white=1"...

CVE-2008-4763

Multiple cross-site scripting XSS vulnerabilities in sample.php in WiKID wClient-PHP 3.0-2 and earlier allow remote attackers to inject arbitrary web script or HTML via the PHPSELF variable...

CVE-2008-4763: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in sample.php in WiKID wClient-PHP 3.0-2 and earlier allow remote attackers to inject arbitrary web script or HTML via the PHPSELF variable...

CVE-2007-4951: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in sample.php in YaPiG 0.95b allows remote attackers to execute arbitrary PHP code via a URL in the YAPIGPATH parameter. NOTE: this issue has been disputed by CVE, since YAPIGPATH is defined before use...