ViArt Shop (aka Shopping Cart) 3.5 allows remote malicious users to access the contents of an arbitrary shopping cart via a modified cart_name parameter.
viart viart shop 3.5