CVE:CVE-2012-4942
CNNVD:CNNVD-201211-166
FleetCommander是一款基于WEB的应用。
Agile FleetCommander和FleetCommander Kiosk 4.08之前版本中存在多个跨站脚本漏洞。远程攻击者可利用该漏洞通过任意文本字段注入任意网页脚本或HTML代码。
solution:Upgrade agilefleet fleetcommander to a higher version than 4.0,and avoid the version (,4.0]; Upgrade agilefleet fleetcommander_kiosk to a higher version than 4.0,and avoid the version (,4.0]