CVE:CVE-2005-3970
CNNVD:CNNVD-200512-038
MXChange0.2.0-pre10 PL492之前版本存在跨站脚本攻击漏洞。远程攻击者可以通过未知向量执行任意Web脚本或HTML。
solution:Upgrade mxchange mxchange to a higher version than 0.2.0_pre3,0.2.0_pre4,0.2.0_pre5,0.2.0_pre6,0.2.0_pre7,0.2.0_pre8,0.2.0_pre9,0.2.0_pre10,and avoid the version 0.2.0_pre3,0.2.0_pre4,0.2.0_pre5,0.2.0_pre6,0.2.0_pre7,0.2.0_pre8,0.2.0_pre9,0.2.0_pre10