CVE-2010-5035 Cross-site scripting (XSS) vulnerability in search.php in iScripts eSwap 2.0 allows remote attackers to inject arbitrary web script or HTML via the txtHomeSearch parameter (aka the search field). NOTE...
MediumCVSS 4.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in search.php in iScripts eSwap 2.0 allows remote attackers to inject arbitrary web script or HTML via the txtHomeSearch parameter (aka the search field). NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iscripts eswap | = 2.0 | No fix listed |
References
- packetstormsecurity.org exploit
- 40087 third-party-advisory vendor-advisory
- 8522 third-party-advisory
- 13740 exploit
- 40597 exploit vdb-entry
- ADV-2010-1360 vdb-entry vendor-advisory
- eswap-search-xss(59148) vdb-entry