CVE:CVE-2004-0617
CNNVD:CNNVD-200412-036
ArbitroWeb 0.6版本存在跨站脚本(XSS)漏洞。远程攻击者借助rawURL参数注入任意脚本或者HTML。
solution:Upgrade arbitroweb arbitroweb to a higher version than 0.5,0.6,and avoid the version 0.5,0.6