CVE:CVE-2007-3324
CNNVD:CNNVD-200706-340
Comersus Cart中存在多个跨站脚本攻击漏洞。远程攻击者可以借助提交到(1)comersus_customerAuthenticateForm.asp或(2)comersus_message.asp的redirectUrl参数，注入任意的web脚本或HTML。
solution:Upgrade comersus_open_technologies comersus_cart to a higher version than 7.07,and avoid the version 7.07