|
Description
|
|
Multiple vulnerabilities have been identified in FreeWebshop.org, which could be exploited by remote attackers to perform cross site scripting and local file inclusions.
The first issue is due to an input validation error when processing the "cat" parameter, which could be exploited by attackers to cause malicious scripting code to be executed by the user's browser.
The second flaw is due to an input validation error in the "index.php" script that does not properly validate the "page" parameter, which could be exploited by remote attackers to include or disclose the contents of local files with the privileges of the web server.
|
