ID de Prueba:	1.3.6.1.4.1.25623.1.0.14352
Categoría:	Web application abuses
Título:	JShop XSS Vulnerability
Resumen:	J-Shop is prone to a cross-site scripting (XSS) vulnerability.
Descripción:	Summary: J-Shop is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The remote version of this software is vulnerable to an XSS attack. An attacker can exploit it by compromising the parameters to the files help.php and/or search.php. Vulnerability Impact: This can be used to take advantage of the trust between a client and server allowing the malicious user to execute malicious JavaScript on the client's machine. Solution: Upgrade to the latest version of this software CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-2084 BugTraq ID: 9609 http://www.securityfocus.com/bid/9609 http://www.systemsecure.org/advisories/ssadvisory09022004.php http://www.osvdb.org/3889 http://securitytracker.com/id?1008988 http://secunia.com/advisories/10825 XForce ISS Database: jshop-searchphp-xss(15100) https://exchange.xforce.ibmcloud.com/vulnerabilities/15100
Copyright	Copyright (C) 2004 Noam Rathaus

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.