cve/2005/CVE-2005-1486.md

### [CVE-2005-1486](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1486)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Multiple cross-site scripting vulnerabilities in FishCart 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) trackingnum, (2) reqagree, or (3) m parameter to upstracking.php or (4) nlst parameter to display.php.  NOTE: the vendor was not able to reproduce some of the reported vectors but believes that they have been addressed.  The original researcher is known to be unreliable.

### POC

#### Reference
- http://marc.info/?l=bugtraq&m=111530799109755&w=2

#### Github
No PoCs found on GitHub currently.