CVE:CVE-2006-2925
CNNVD:CNNVD-200606-199
Ingate Firewall和SIParator中的web界面存在跨站脚本攻击(XSS)漏洞，远程攻击者可通过未明向量(和管理员功能中的"XSS利用"有关)来注入任意Web脚本或HTML并窃取cookies。
solution:Upgrade ingate ingate_firewall to a higher version than 4.3.4,4.3.1,and avoid the version (,4.3.4],4.3.1; Upgrade ingate siparator to a higher version than 4.3.4,4.3.1,and avoid the version (,4.3.4],4.3.1