CVE:CVE-2007-4146
CNNVD:CNNVD-200708-044
WebEvent 2.61至4.03版本的webevent.cgi中存在跨站脚本攻击漏洞。远程攻击者可以借助cmd参数，注入任意web脚本或HTML。
solution:Upgrade webevents webevents to a higher version than 2.7,2.61,2.71,2.72,4.03,and avoid the version 2.7,2.61,2.71,2.72,4.03