PT-2012-5837

Name of the Vulnerable Software and Affected Versions xClick Cart versions 1.0.1 through 1.0.2 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the shopping url parameter in the webscr.php file. Recommendations For versions 1.0.1 and 1.0....

xClick Cart 1.0.x - shopping_url Cross-Site Scripting

xClick Cart 1.0.x - shoppingurl Cross-Site Scripting source: https://www.securityfocus.com/bid/51699/info xClick Cart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

xClick Cart 1.0.1 / 1.0.2 Cross Site Scripting

Exploit Title: xClick Cart Cross Site Scripting Date: 27.01.2012 Author: Sony Software Link: http://www.eliteweaver.co.uk/?page=xclick-cart Version: v1.0.1/v1.0.2 Google Dorks: intext:"Powered by: xClick Cart" or webscr.php?itemname= Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com...

xClick Cart 1.0.x - 'shopping_url' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51699/info xClick Cart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...