CVE:CVE-2005-2953
CNNVD:CNNVD-200509-156
MIVA Merchant是一款M经济实惠，可定制的网上商店的发展系统。
MIVA Merchant 5版本中的merchant.mvc存在跨站脚本(XSS)漏洞，允许远程攻击者通过Customer_Login参数注入任意web脚本或HTML。
solution:Upgrade miva miva_merchant to a higher version than 5.0,and avoid the version 5.0
solution:Upgrade phpfreenews phpfreenews to a higher version than 1.40,and avoid the version 1.40