CVE:CVE-2007-2579
CNNVD:CNNVD-200705-150
ACP3 中存在多个跨站脚本攻击漏洞。远程攻击者可以借助提交到contact/contact/index.php的(1)form[mail]参数、到search/list/action_search/index.php的(2)form[mods][]或(3)form[search_term]参数、到modules/dl/download.php的(4)id参数、到news/list/index.php的(5)form[cat]参数、到特定的news/details/id_*/action_create/index.php文件的(6)form[cat],(7)form[name]或(8)form[message]参数或到newsletter/create/index.php的(9)form[mail]参数，注入任意的web脚本或HTML。
solution:Upgrade acp3 acp3 to a higher version than 4.0_beta_3,and avoid the version 4.0_beta_3