4.3
CVSSv2

CVE-2012-5226

Published: 01/10/2012 Updated: 29/08/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote malicious users to inject arbitrary web script or HTML via the (1) motclef parameter to achat/recherche.php or (2) PATH_INFO to index.php.

Vulnerable Product Search on Vulmon Subscribe to Product

peel peel shopping 2.8

peel peel shopping 2.9

Exploits

+-------------------------------------------------------------------------+ # Exploit Title : Peel SHOPPING - version 28 and version 29 xss/sql inject Vulnerability # version : v29 # Author : Cyber-Crystal ...