CVE-2005-1188: Undefined Security Weakness

Cross-site scripting XSS vulnerability in comersussearchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to inject arbitrary web script or HTML via the curPage parameter...

Comersus Cart comersus_searchItem.asp curPage Parameter XSS

The version of Comersus Cart installed on the remote host fails to properly sanitize user input to the 'curPage' parameter of the 'comersussearchItem.asp' script. An attacker can exploit this vulnerability to cause arbitrary HTML and script code to be executed in a user's browser within the conte...