CVE:CVE-2005-2476
CNNVD:CNNVD-200508-070
Naxtor Shopping Cart 1.0中的lost_passowrd.php存在跨站脚本(XSS)漏洞。这使得远程攻击者可以借助于email参数注入任意的Web脚本或HTML。
solution:Upgrade naxtor shopping_cart to a higher version than 1.0,and avoid the version 1.0