CVE-2005-1130

Pinned: CVE-2005-1130 is an XSS vulnerability in Pinnacle Cart (PHP) where the index.php script fails to sanitize the pg parameter, allowing arbitrary HTML/script injection. Affected component: Pinnacle Cart index.php; entry points: pg parameter. Reported exploitability is remote with no authenti...

CVE-2006-2163

CVE-2006-2163 is an XSS vulnerability in Pinnacle Cart (versions up to 3.33 and earlier) where the setbackurl parameter in index.php can be exploited to inject arbitrary script/HTML. The root cause is unvalidated/unsanitized input propagated to the browser. Affected software is Pinnacle Cart 3.33...