CVE:CVE-2009-3198
CNNVD:CNNVD-200909-300
JCE-Tech Affiliate Master Datafeed Parser Script 2.0版本的search.php中存在跨站脚本攻击漏洞。远程攻击者可以借助搜索参数，注入任意WEB脚本或HTML。
solution:Upgrade jce-tech affiliate_master_datafeed_parser to a higher version than 2.0,and avoid the version 2.0