Description
Cross-site scripting (XSS) vulnerability in search.php for FreznoShop 1.3.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by David S. Ferreira · textwebappsphp
https://www.exploit-db.com/exploits/23519
References (6)
Core 6
Core References
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/9359
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/14147
Exploit, Patch vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1008606
Various Sources x_refsource_confirm
http://www.freznoshop.com/changelog_en.htm
Exploit, Patch third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/10547
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/3335
Scores
EPSS
0.0124
EPSS Percentile
79.4%
Details
Status
published
Published
Dec 31, 2004
Tracked Since
Feb 18, 2026