Required CVE Record Information
Description
Cross-site scripting (XSS) vulnerability in kshop_search.php in the Kshop module 2.22 for Xoops allows remote attackers to inject arbitrary web script or HTML via the search parameter.
References 5 Total
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 5 Total
- secunia.com: 31402 third-party-advisoryx_transferred
- securityfocus.com: 30576 vdb-entryx_transferred
- http://downloads.securityfocus.com/vulnerabilities/exploits/30576.html x_transferred
- http://lostmon.blogspot.com/2008/08/kshop-module-search-variable-and-field.html x_transferred
- exchange.xforce.ibmcloud.com: kshop-kshopsearch-xss(44261) vdb-entryx_transferred