CVE-2006-3141
Cross-site scripting (XSS) vulnerability in details.cfm in Tradingeye Shop R4 and earlier allows remote attackers to inject arbitrary web script or HTML via the image parameter.
Date published : 2006-06-22
http://www.securityfocus.com/bid/18526
http://pridels0.blogspot.com/2006/06/tradingeye-shop-r4-xss.html