CVE-2005-2476: Undefined Security Weakness

Cross-site scripting XSS vulnerability in lostpassowrd.php in Naxtor Shopping Cart 1.0 allows remote attackers to inject arbitrary web script or HTML via the email parameter...