XSS in Resalecode Php Shopping Cart Selling Website Script
CVE-2009-4688
Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Shopping Cart Selling Website Script allow remote attackers to inject arbitrary web script or HTML via the (1) txtkeywords and (2) cid parameters.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.031 (86.3th percentile) — read the EPSS interpretation.
Affected products
- Resalecode Php_shopping_cart_selling_website_script
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)