CVE:CVE-2007-0183
CNNVD:CNNVD-200701-163
iPlanet Web服务器4.x的/search中存在跨站脚本攻击漏洞。远程攻击者可以借助NS-max-records参数，注入任意的web脚本或HTML。
solution:Upgrade sun iplanet_web_server to a higher version than 4.1,4.1:sp1,4.1:sp10,4.1:sp2,4.1:sp3,4.1:sp4,4.1:sp5,4.1:sp6,4.1:sp7,4.1:sp8,4.1:sp9,and avoid the version 4.1,4.1:sp1,4.1:sp10,4.1:sp2,4.1:sp3,4.1:sp4,4.1:sp5,4.1:sp6,4.1:sp7,4.1:sp8,4.1:sp9