Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote attackers to execute arbitrary web script via the cart32 parameter to a GetLatestBuilds command.
- http://marc.info/?l=bugtraq&m=108887778628398&w=2
No PoCs found on GitHub currently.