Home / exploits

PDF

Prestashop Cartium 1.3.3 Cross Site Scripting

Posted on 02 March 2011

Hello,
In Prestashop Cartium 1.3.3 I have detected multiple Cross Site Scripting (XSS)
vulnerabilities:

File                 Field
categoty.php   id_category
product.php     id_product
search.php      search_query

Test pattern for vulnerable versions:

"></script>alert(1)</script>

Kind Regards
Antonio San Martino

 

TOP