VYPR

Minishop Module

by Rmsoft

CVEs (2)

  • CVE-2008-4432Oct 3, 2008
    risk 0.03cvss epss 0.01

    Cross-site scripting (XSS) vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attackers to inject arbitrary web script or HTML via the itemsxpag parameter.

  • CVE-2008-4433Oct 3, 2008
    risk 0.00cvss epss 0.01

    SQL injection vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops might allow remote attackers to execute arbitrary SQL commands via the itemsxpag parameter.