CVE-2011-0504 Multiple cross-site scripting (XSS) vulnerabilities in VaM Shop 1.6, 1.6.1, and probably earlier versions llow remote attackers to inject arbitrary web script or HTML via the (1) status parameter to a...
MediumCVSS 4.3
EPSS 4.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in VaM Shop 1.6, 1.6.1, and probably earlier versions llow remote attackers to inject arbitrary web script or HTML via the (1) status parameter to admin/orders.php, (2) search parameter to admin/customers.php, or (3) STORE_NAME parameter to admin/configuration.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vamshop vam shop | = 1.6 | No fix listed |
| vamshop vam shop | = 1.6.1 | No fix listed |
References
- 70429 exploit vdb-entry
- 70430 vdb-entry
- 42869 third-party-advisory vendor-advisory
- 15968 exploit
- www.htbridge.ch exploit
- www.htbridge.ch exploit
- www.htbridge.ch exploit
- 20110111 XSS vulnerability in VaM Shop exploit mailing-list
- 20110111 XSS vulnerability in VaM Shop exploit mailing-list
- 20110111 XSS vulnerability in VaM Shop mailing-list