For your information

Pre-Sales & FeedBack Suggestions and Feedback
1

Cross Site Scripting Vulnerability in osCommerce, New vulnerability found on February

http://forums.oscommerce.com/index.php?showtopic=137667&pid=556051&mode=threaded&show=&st=&#entry556051

2

Thanks.

Sounds like everyone using oscomerce needs to take steps to prevent this.