← Database

CVE-2009-2032

MEDIUM CVSS: 4.3 Published: 2009-06-12 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in search.asp in PDshopPro, when downloaded before 20070308, allows remote attackers to inject arbitrary web script or HTML via the search parameter.

Affected Platforms

Pagedowntech Pdshoppro

Weakness Type

CWE-79

References