Cookie Cart allows remote malicious users to read the Order Notification list via the testmycgi and path parameters to testmy.cgi.
metro marketing cookie cart