Unrated severityNVD Advisory· Published Jan 20, 2011· Updated Jun 16, 2026

CVE-2011-0504

Description

Multiple cross-site scripting (XSS) vulnerabilities in VaM Shop 1.6, 1.6.1, and probably earlier versions llow remote attackers to inject arbitrary web script or HTML via the (1) status parameter to admin/orders.php, (2) search parameter to admin/customers.php, or (3) STORE_NAME parameter to admin/configuration.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Joomla/Vam Shop2 versions
cpe:2.3:a:vamshop:vam_shop:1.6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:vamshop:vam_shop:1.6:*:*:*:*:*:*:*
- cpe:2.3:a:vamshop:vam_shop:1.6.1:*:*:*:*:*:*:*
VAM/Shopllm-create
Range: <=1.6.1

Patches

Vulnerability mechanics

References

osvdb.org/70429nvdExploit
www.exploit-db.com/exploits/15968nvdExploit
www.htbridge.ch/advisory/xss_vulnerability_in_vam_shop.htmlnvdExploit
www.htbridge.ch/advisory/xss_vulnerability_in_vam_shop_1.htmlnvdExploit
www.htbridge.ch/advisory/xss_vulnerability_in_vam_shop_2.htmlnvdExploit
www.securityfocus.com/archive/1/515615/100/0/threadednvdExploit
www.securityfocus.com/archive/1/515619/100/0/threadednvdExploit
secunia.com/advisories/42869nvdVendor Advisory
osvdb.org/70430nvd
www.securityfocus.com/archive/1/515620/100/0/threadednvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000