Description
Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the (1) parent or (2) pg parameter.
References
- boxcar-index-xss(24019) vdb-entry
- http://osvdb.org/ref/22/22360-boxcar.txt
- ADV-2006-0080 vdb-entry
- 22360 vdb-entry