CVE-2008-3841 Information

Description

Cross-site scripting (XSS) vulnerability in admin/search_links.php in Freeway eCommerce 1.4.1.171 allows remote attackers to inject arbitrary web script or HTML via the search_link parameter.

Reference

http://secunia.com/advisories/31475 http://securityreason.com/securityalert/4181 http://www.openfreeway.org/download/change-log.html http://www.securityfocus.com/archive/1/495549/100/0/threaded