Description

Multiple cross-site scripting (XSS) vulnerabilities in PrestaShop 1.1.0.3 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin/login.php and (2) order.php.

Remediation

References

CVE-2008-6503

Related Vulnerabilities

WordPress Plugin Kama Click Counter Cross-Site Scripting (3.4.9)

EspoCRM Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2022-38845)

OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-0292)

WordPress Plugin WP Product Review Lite Cross-Site Scripting (3.7.5)

WordPress Plugin Adning Advertising-Professional, All In One Ad Manager for Wordpress Arbitrary File Upload (1.5.5)

Severity

Medium

Classification

CVE-2008-6503 CWE-707

Tags

Missing Update Known Vulnerabilities