CVE:CVE-2005-2191
CNNVD:CNNVD-200507-100
Comersuss shopping cart是一款免费的网站购物车程序。
Comersuss shopping cart中存在多个跨站脚本攻击漏洞。
可让远程攻击者通过comersus_backoffice_listAssignedPricesToCustomer.asp的name参数或comersus_backoffice_message.asp的message参数注入任意Web脚本或HTML。
solution:Upgrade comersus_open_technologies comersus_cart to a higher version than *