PT-2012-3542

Name of the Vulnerable Software and Affected Versions OSCommerce Online Merchant version 3.0.2 Description A cross-site scripting XSS issue exists in the software during installation, allowing remote attackers to inject arbitrary web script or HTML via the name parameter to "oscommerce/index.php"...