CVE:CVE-2005-3685
CNNVD:CNNVD-200511-261
VP-ASP Shopping Cart是一款在线商店程序。
VP-ASP Shopping Cart 5.50的shopadmin.asp存在跨站脚本(XSS)漏洞，可让远程攻击者通过UserName参数注入任意Web脚本或HTML。
solution:Upgrade virtual_programming vp-asp to a higher version than 5.50,and avoid the version 5.50