Shopping Cart V0.9

Homepage:

http://glendown.de/shop/


Affected files:


index.php

editshop.php

edititem.php

-----------------------------------------


XSS vuln on editshop.php & edititem.php:


Data isn't sanatized before being entered. For a PoC as a shop name or item 
enter in:


<script>alert('xss')</script>


The shop names also appear on index.php, so it's affected here too.

Reply via email to