CVE:CVE-2005-4285
CNNVD:CNNVD-200512-335
Dick Copits PDEstore 1.8及更早版本的pdestore.cgi中存在跨站脚本攻击漏洞，远程攻击者可以通过(1)search模块参数或(2) product及(3) cart_id参数注入任意Web脚本或HTML。
solution:Upgrade dick_copits pdestore to a higher version than 1.8,and avoid the version (,1.8]