CVE:CVE-2005-4284
CNNVD:CNNVD-200512-324
StaticStore Search Engine 1.189A及更早版本存在跨站脚本攻击漏洞，远程攻击者可以通过search.cgi的未明搜索参数(有可能是关键词参数)注入任意Web脚本或HTML。
solution:Upgrade static_store staticstore to a higher version than 1.189a,and avoid the version (,1.189a]