2Daybiz · 2Daybiz Custom T-Shirt Design Script · CVE-2009-1820
Name of the Vulnerable Software and Affected Versions:
2daybiz Custom T-shirt Design Script (affected versions not specified)
Description:
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the `id` parameter in the product.php file.
Recommendations:
For the affected version, consider restricting access to the `id` parameter in the product.php file until a patch is available. As a temporary workaround, avoid using the `id` parameter in the vulnerable product.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.