CVE:CVE-2009-4944
CNNVD:CNNVD-201007-216
ATRC ACollab 1.2存在多个跨站脚本(XSS)攻击漏洞。远程攻击者可以借助(1)profile.php中address参数或者(2)events/add_event.php中description参数注入任意web脚本或者HTML。
solution:Upgrade atutor acollab to a higher version than 1.2,and avoid the version 1.2