CVE		CVE-2008-4121
Status		Candidate
Description		Multiple cross-site scripting (XSS) vulnerabilities in cpCommerce before 1.2.4 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in a search.quick action to search.php and (2) the name parameter in a sendtofriend action to sendtofriend.php.
Phase		Assigned (18.09.2008)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-4121
References		BUGTRAQ : 20081019 Cross Site Scripting (XSS) Vulnerabilitiy in cpcommerce, CVE-2008-4121
		CONFIRM : http://cpcommerce.cpradio.org/
		MISC : http://www.datensalat.eu/~fabian/cve/CVE-2008-4121...
		SECUNIA : 32353
		SREASON : 4448
SecurityVulns:		Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)