CVE:CVE-2006-6589
CNNVD:CNNVD-200612-369
Apache Open For Business Project (OFBiz)和Opentaps 0.9.3中的ecommerce/control/keywordsearch存在跨站脚本攻击漏洞，远程攻击者可通过SEARCH_STRING参数来注入任意Web脚本或HTML。
solution:Upgrade apache ofbiz to a higher version than *; Upgrade apache opentaps to a higher version than 0.9.3,and avoid the version 0.9.3