CVE:CVE-2009-3195
CNNVD:CNNVD-200909-297
JCE-Tech Auction RSS Content Script3.0版本中存在多个跨站脚本攻击漏洞。远程攻击者可以借助对(1)rss.php和(2)search.php的id参数，注入任意web脚本或HTML。
solution:Upgrade jce-tech auction_rss_content_script to a higher version than 3.0,and avoid the version 3.0