CVE-2005-2386

Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ 1.20 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Date published : 2005-07-27

http://www.securityfocus.com/bid/14386

http://www.hackerscenter.com/archive/view.asp?id=4008