Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Ecommerce Corporation Online Store Kit More.PHP Multiple Vulnerabilities

Multiple vulnerabilities have been identified in the software due to improper sanitization of user-supplied input. Successful exploitation of these issues could allow an attacker to carry out cross-site scripting and SQL injection attacks via the 'id' parameter of 'more.php' script.

Online Store Kit version 3.0 has been reported to be prone to these issues.







 

Privacy Statement
Copyright 2009, SecurityFocus