Multiple Cross-Site Scripting Vulnerabilities in Shopizer by Shopizer Inc.
CVE-2014-4965

Currently unrated

Key Information:

Vendor

Shopizer

Status
Shopizer
Vendor
CVE Published:
15 July 2014

What is CVE-2014-4965?

Multiple cross-site scripting vulnerabilities exist in Shopizer versions 1.1.5 and earlier, allowing attackers to exploit various input fields. By injecting malicious scripts or HTML through parameters like customername, productname, availability, and status in certain actions, attackers can compromise the integrity of web applications. This vulnerability enables unauthorized content injection, potentially leading to data theft or user session hijacking.

References

http://www.securityfocus.com/archive/1/532726/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://seclists.org/fulldisclosure/2014/Jul/38
mailing-listx_refsource_FULLDISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/94465
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.