Description
Cross-site scripting vulnerability in category.php in Modular Merchant Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the cat parameter.
References
- 16160 vdb-entry
- 20060214 vendor ack/fix 22243: Modular Merchant Marketplace Shopping Cart category.php cat Variable XSS (fwd) mailing-list
- 18320 third-party-advisory
- 22243 vdb-entry
- http://osvdb.org/ref/22/22243-modular.txt
- http://www.modularmerchant.com/forums/viewtopic.php?t=46
- ADV-2006-0076 vdb-entry