CVE:CVE-2002-0326
CNNVD:CNNVD-200206-062
BadBlue 1.6.1 beta之前版本存在跨站脚本漏洞。远程攻击者借助包含Javascript的URL执行任意脚本且可能添加命令。
solution:Upgrade working_resources_inc. badblue to a higher version than 1.2.7,1.2.8,1.5,1.5.6_beta,1.6.1_beta,and avoid the version 1.2.7,1.2.8,1.5,1.5.6_beta,1.6.1_beta