CVE-2010-1361
Cross-site scripting (XSS) vulnerability in shop/USER_ARTIKEL_HANDLING_AUFRUF.php in PHPepperShop 2.5 allows remote attackers to inject arbitrary web script or HTML via the darstellen parameter.
Date published : 2010-04-13
http://www.securityfocus.com/bid/37707
http://packetstormsecurity.org/1001-exploits/phpeppershopws-xss.txt