CVE:CVE-2006-3428
CNNVD:CNNVD-200607-025
TigerTom TTCalc 1.0 存在跨站脚本攻击(XSS) 漏洞。远程攻击者可以通过(1) loan.php和(2) mortgage.php中的year参数注入任意Web脚本或HTML。
solution:Upgrade tigertom_scripts ttcalc_script to a higher version than 1.0,and avoid the version 1.0