Description
Multiple cross-site scripting (XSS) vulnerabilities in (1) deliver.asp and (2) billing.asp in A-CART Pro and A-CART 2.0 allow remote attackers to inject arbitrary web script or HTML via the user information forms.
References
- 20040329 A-CART Pro & A-CART 2.0 Input Validation Holes mailing-list
- 11236 third-party-advisory
- 9997 vdb-entry
- acart-deliverasp-billingasp-xss(15660) vdb-entry