CVE:CVE-2008-0494
CNNVD:CNNVD-200801-442
Endian Firewall 2.1.2中的vpnum/userslist.php中存在跨站脚本漏洞。远程攻击者可以借助psearch参数，注入任意的WEB脚本或HTML。
solution:Upgrade endian firewall to a higher version than 2.1.2,and avoid the version 2.1.2