Yyj_0815

**Name of the Vulnerable Software and Affected Versions** Code-Projects E-Commerce Website version 1.0 **Description** A cross site scripting issue exists in Code-Projects E-Commerce Website version 1.0. The issue is related to the manipulation of the `supp name`/`supp address` arguments within the file '/pages/supplier add.php'. This allows for remote attacks. The exploit has been publicly disclosed. **Recommendations** Address the manipulation of the `supp name` and `supp address` arguments in the '/pages/supplier add.php' file.

**Name of the Vulnerable Software and Affected Versions** code-projects E-Commerce Website version 1.0 **Description** A flaw exists in code-projects E-Commerce Website 1.0 that allows for cross site scripting. The issue is located in the `/pages/product add.php` file. Manipulation of the `prod name`, `prod desc`, or `prod cost` arguments can trigger the flaw. The attack can be launched remotely, and the exploit is publicly available. **Recommendations** Apply a fix to the vulnerable file `/pages/product add.php` to sanitize the `prod name`, `prod desc`, and `prod cost` arguments.

**Name of the Vulnerable Software and Affected Versions** code-projects E-Commerce Website version 1.0 **Description** A cross site scripting issue exists in code-projects E-Commerce Website version 1.0. The issue is related to the manipulation of the `supp name`/`supp address` argument within the file '/pages/supplier update.php'. This manipulation can be initiated remotely. The exploit has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.