CVE:CVE-2005-1188
CNNVD:CNNVD-200505-213
Comersus 3.90至4.51的comersus_searchItem.asp中存在跨站脚本攻击(XSS)漏洞。远程攻击者可以借助curPage参数，注入任意的Web脚本或HTML。
solution:Upgrade comersus_open_technologies comersus_cart to a higher version than 3.90,4.00,4.14,4.20b,4.23,4.27,4.28,4.29,4.36,4.47,4.051,and avoid the version 3.90,4.00,4.14,4.20b,4.23,4.27,4.28,4.29,4.36,4.47,4.051