CVE-2005-2386 Information

Description

Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ 1.20 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Reference

http://www.hackerscenter.com/archive/view.asp?id=4008 http://www.securityfocus.com/bid/14386