CVE:CVE-2006-2349
CNNVD:CNNVD-200605-250
E-Business Designer (eBD) 3.1.4及之前版本可以使远程攻击者借助对(1) common/html_editor/image_browser.upload.html, (2) common/html_editor/image_browser.html, 或(3) common/html_editor/html_editor.html的直接请求，上传或修改任意文件。 注意: 通过上传层叠式样式表(.CSS) 文件，此漏洞也可用于跨站脚本攻击(XSS)。
solution:Upgrade oasyssoft e-business_designer to a higher version than 3.1.4,and avoid the version (,3.1.4]