CVE-2005-4291: Undefined Security Weakness

Cross-site scripting XSS vulnerability in cart.cgi in ECTOOLS Onlineshop 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 product, 2 category, and 3 uid parameters...