CVE

Id
42005  
CVE No.
CVE-2009-4570  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in PhpShop 0.8.1 allows remote attackers to inject arbitrary web script or HTML via the order_id parameter in an order/order_print action to the default URI.  
Phase
Assigned (20100105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
460270 42005 CVE-2009-4570 BUGTRAQ:20091206 PhpShop Multiple Vulnerabilities  View
460271 42005 CVE-2009-4570 URL:http://www.securityfocus.com/archive/1/archive/1/508270/100/0/threaded  View
460272 42005 CVE-2009-4570 MISC:http://www.andreafabrizi.it/?exploits:phpshop  View
460273 42005 CVE-2009-4570 BID:37227  View
460274 42005 CVE-2009-4570 URL:http://www.securityfocus.com/bid/37227  View
460275 42005 CVE-2009-4570 SECUNIA:31948  View
460276 42005 CVE-2009-4570 URL:http://secunia.com/advisories/31948  View
460277 42005 CVE-2009-4570 XF:phpshop-orderid-xss(54589)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38551 JVNDB-2010-004336 I-Escorts の Directory Script の country_escorts.php における SQL インジェクションの脆弱性 I-Escorts の Directory Script の country_escorts.php には、SQL インジェクションの脆弱性が存在します。 CVE-2009-4574 42005 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004336.html  View