low2.6Public exploit code
CVE-2010-1856
Cross-site scripting (XSS) vulnerability in index.php in RepairShop2 1.9.023 Trial, when magic_quotes_gpc is disabled, allows remote attackers to inject arbitr…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RepairShop2 - 'index.php?Prod' Cross-Site Scripting2010-03-23 · webapps · php · Verified
Impact
Cross-site scripting (XSS) vulnerability in index.php in RepairShop2 1.9.023 Trial, when magic_quotes_gpc is disabled, allows remote attackers to inject arbitrary web script or HTML via the prod parameter in a products.details action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Realitymedias | Repairshop2 | Version 1.9.023 |