|
|
Family: CGI abuses : XSS --> Category: infos
JShop Cross-Site Scripting Vulnerability Vulnerability Scan
Vulnerability Scan Summary
Searches for the existence of an XSS bug in JShop
Detailed Explanation for this Vulnerability Test
The remote host is running J-Shop, an e-Commerce suite written in PHP.
The remote version of this software is vulnerable to a cross-site scripting
attack.
A possible hacker can exploit it by compromising the parameters to the files
help.php and/or search.php.
This can be used to take advantage of the trust between a client and server
allowing the malicious user to execute malicious JavaScript on
the client's machine.
Solution : Upgrade to the latest version of this software
Risk factor: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
