CVE:CVE-2007-5702
CNNVD:CNNVD-200710-498
Novell OpenSUSE SWAMP Workflow Administration 和 Management Platform 1.x版本的swamp/action/LoginActions (又称login box)中存在跨站脚本攻击漏洞。远程攻击者可以借助用户名参数，注入任意web脚本或HTML。
solution:Upgrade novell opensuse_swamp to a higher version than *