CVE-2008-6969

CVE-2008-6969 concerns multiple cross-site scripting (XSS) vulnerabilities in Avactis Shopping Cart, specifically in checkout.php for versions 1.8.0 and 1.8.1. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) step_id and (2) CHECKOUT_CZ_BLOWFISH_KEY parameters....