Bigware Shop version 2.3.01 suffers from cross site scripting and remote file upload vulnerabilities. Continue reading...