Description
Cross-site scripting (XSS) vulnerability in Custva.asp in EarlyImpact ProductCart allows remote attackers to inject arbitrary Javascript via the redirectUrl parameter.
References
- 9669 vdb-entry
- 3980 vdb-entry
- productcart-custva-xss(15234) vdb-entry
- http://www.earlyimpact.com/productcart/support/updates/ReadMe_ProductCart_Security_Patch_013004.txt
- 1009085 vdb-entry
- 20040216 EarlyImpact ProductCart shopping cart software multiple security vulnerabilities mailing-list
- http://www.s-quadra.com/advisories/Adv-20040216.txt
- 20040218 Re: EarlyImpact ProductCart shopping cart software multiple security vulnerabilities mailing-list
- 10898 third-party-advisory