CVE-2012-5225

Cross-site scripting XSS vulnerability in webscr.php in xClick Cart 1.0.1 and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the shoppingurl parameter...

CVE-2012-5225

CVE-2012-5225 concerns a cross-site scripting (XSS) vulnerability in the webscr.php component of xClick Cart versions 1.0.1 and 1.0.2. The flaw allows remote attackers to inject arbitrary web script or HTML via the shopping_url parameter. The public sources describe the affected product and vulne...

CVE-2012-5225: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in webscr.php in xClick Cart 1.0.1 and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the shoppingurl parameter...

PT-2012-5837

Name of the Vulnerable Software and Affected Versions xClick Cart versions 1.0.1 through 1.0.2 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the shopping url parameter in the webscr.php file. Recommendations For versions 1.0.1 and 1.0....