The remote host is running J-Shop, an e-Commerce suite written in PHP. The remote version of this software is vulnerable to a cross-site scripting attack. An attacker can exploit it by compromising the parameters to the files help.php and/or search.php. This can be used to take advantage of the trust between a client and server allowing the malicious user to execute malicious JavaScript on the client's machine.

Upgrade to the latest version of this software