CVE
- Id
- 44048
- CVE No.
- CVE-2010-1464
- Status
- Candidate
- Description
- Multiple cross-site scripting (XSS) vulnerabilities in WebAsyst Shop-Script FREE allow remote attackers to inject arbitrary web script or HTML via the (1) currency_id_left, (2) currency_id_right, (3) darkcolor, (4) lightcolor, (5) middlecolor, and (6) w parameters.
- Phase
- Assigned (20100416)
- Votes
- None (candidate not yet proposed)
- Comments