Test ID:	1.3.6.1.4.1.25623.1.0.14352
Category:	Web application abuses
Title:	JShop XSS Vulnerability
Summary:	J-Shop is prone to a cross-site scripting (XSS) vulnerability.
Description:	Summary: J-Shop is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The remote version of this software is vulnerable to an XSS attack. An attacker can exploit it by compromising the parameters to the files help.php and/or search.php. Vulnerability Impact: This can be used to take advantage of the trust between a client and server allowing the malicious user to execute malicious JavaScript on the client's machine. Solution: Upgrade to the latest version of this software CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-2084 BugTraq ID: 9609 http://www.securityfocus.com/bid/9609 http://www.systemsecure.org/advisories/ssadvisory09022004.php http://www.osvdb.org/3889 http://securitytracker.com/id?1008988 http://secunia.com/advisories/10825 XForce ISS Database: jshop-searchphp-xss(15100) https://exchange.xforce.ibmcloud.com/vulnerabilities/15100
Copyright	Copyright (C) 2004 Noam Rathaus

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.