Detections
Analytics
SunShop Shopping Cart index.php search Parameter XSS
medium Nessus Plugin ID 16322
Language:
Synopsis
The remote web application is vulnerable to cross-site scripting.Description
The remote host is running SunShop, a web-based shopping cart program written in PHP.The remote version of this software is vulnerable to several input validation flaws, which may allow an attacker to use the remote web site to perform a cross-site scripting attack.
Solution
Upgrade to SunShop version 3.5 or later.See Also
Plugin Details
Severity: Medium
ID: 16322
File Name: sunshop_xss.nasl
Version: 1.18
Type: remote
Family: CGI abuses : XSS
Published: 2/8/2005
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
Vulnerability Information
Required KB Items: www/PHP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: No exploit is required
Vulnerability Publication Date: 2/3/2005
Reference Information
BID: 12438