CVE-2008-4432

Cross-site scripting (XSS) vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attackers to inject arbitrary web script or HTML via the itemsxpag parameter.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:rmsoft:minishop_module:1.0:*:*:*:*:*:*:*
cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2008-10-03 22:22

Updated : 2024-02-04 17:33


NVD link : CVE-2008-4432

Mitre link : CVE-2008-4432

CVE.ORG link : CVE-2008-4432


JSON object : View

Products Affected

xoops

  • xoops

rmsoft

  • minishop_module
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')