Description
Multiple cross-site scripting (XSS) vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via (1) the CatId parameter in a product category action in index.php or (2) the SearchWd parameter in an index search action in index.php.
References
- 20060915 NextAge Cart Cross-Site Scripting multiple Vulnerabilities mailing-list
- 22030 third-party-advisory
- 20040 vdb-entry
- 1016888 vdb-entry
- 1625 third-party-advisory
- ADV-2006-3709 vdb-entry