CVE-2006-5958

Multiple cross-site scripting XSS vulnerabilities in INFINICART allow remote attackers to inject arbitrary web script or HTML via the 1 username and 2 password fields in a login.asp, 3 search field in b search.asp, and 4 email field in c sendpassword.asp...