Published: 15/12/2008 Updated: 11/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 450

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in PHPepperShop 1.4 allow remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php or (2) shop/kontakt.php, or (3) shop_kunden_mgmt.php or (4) SHOP_KONFIGURATION.php in shop/Admin/.

Vulnerable Product	Search on Vulmon	Subscribe to Product
phpeppershop phpeppershop 1.4

source: wwwsecurityfocuscom/bid/32690/info PhPepperShop is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may allow ...

source: wwwsecurityfocuscom/bid/32690/info PhPepperShop is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may a ...

source: wwwsecurityfocuscom/bid/32690/info PhPepperShop is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may allow t ...

source: wwwsecurityfocuscom/bid/32690/info PhPepperShop is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may all ...

CWE-79 http://osvdb.org/50570 http://osvdb.org/50568 http://osvdb.org/50571 http://secunia.com/advisories/33069 http://www.securityfocus.com/bid/32690 http://osvdb.org/50569 http://securityreason.com/securityalert/4745 https://exchange.xforce.ibmcloud.com/vulnerabilities/47157 http://www.securityfocus.com/archive/1/498998/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/32650/

CVE-2008-5569

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect