CVE:CVE-2006-0073
CNNVD:CNNVD-200601-006
DiscusWare Discus Freeware存在跨站脚本攻击(XSS)漏洞，可让远程攻击者通过URL中未指定的矢量(未从产生的错误消息中适当净化)注入任意Web脚本或HTML。注意：此信息来源未知；只是从第三方信息来源获取的详细信息。
solution:Upgrade discusware discus_freeware to a higher version than 3.10.5,and avoid the version 3.10.5; Upgrade discusware discus_professional to a higher version than 3.10.4,and avoid the version 3.10.4