CVE-2006-4967

CVE-2006-4967 involves NextAge Cart with two XSS vectors: via the CatId parameter in the product category action and the SearchWd parameter in the index search action (index.php). The description indicates remote attackers can inject arbitrary script/HTML. No fixes or detailed remediation are pro...