CVE:CVE-2005-4283
CNNVD:CNNVD-200512-321
The CITY Shop 1.3及更早版本中存在跨站脚本攻击漏洞，远程攻击者可以通过搜索模块的参数(有可能是store.cgi的SKey)注入任意Web脚本或HTML。
solution:Upgrade nightmedia the_city_shop to a higher version than 1.3,and avoid the version (,1.3]