CVE:CVE-2002-1732
CNNVD:CNNVD-200212-120
Actinic Catalog 4.7.0版本存在多个跨站脚本（XSS）漏洞。远程攻击者借助(1)某些 .pl文件的查询字符串参数，(2)ca000007.pl的REFPAGE参数，(3)ss000007.pl的PRODREF参数，或者(4)ca000001.pl的hop参数注入任意web脚本或者HTML。
solution:Upgrade actinic actinic_catalog to a higher version than 4.7,and avoid the version 4.7