CVE-2008-4432 Cross-site scripting (XSS) vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attackers to inject arbitrary web script or HTML via the itemsxpag parameter.
MediumCVSS 4.3
EPSS 1.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attackers to inject arbitrary web script or HTML via the itemsxpag parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rmsoft minishop module | = 1.0 | No fix listed |
References
- lostmon.blogspot.com exploit
- 30616 exploit vdb-entry
- minishop-search-xss(44374) vdb-entry