CVE:CVE-2007-0225
CNNVD:CNNVD-200701-168
VP-ASP Shopping Cart 6.09及之前版本的shopcustadmin.asp中存在跨站脚本攻击漏洞。远程攻击者可以借助msg参数，注入任意的web脚本或HTML。
solution:Upgrade virtual_programming vp-asp to a higher version than 6.09,and avoid the version 6.09