CVE-2014-4302

MEDIUM · 4.3 CVSS Gepubliceerd: 18-06-2014 CWE-79

Beschrijving NL

Cross-site scripting (XSS) kwetsbaarheid in rating/rating.php in HAM3D Shop Engine stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de ID-parameter.

Origineel (Engels) tonen

Cross-site scripting (XSS) vulnerability in rating/rating.php in HAM3D Shop Engine allows remote attackers to inject arbitrary web script or HTML via the ID parameter.

Vendors

Ham3d

Affected products

Ham3d Shop Engine

References

packetstormsecurity.com