CVE:CVE-2010-4896
CNNVD:CNNVD-201110-096
Member Management System 4.0版本的admin/index.asp中存在跨站脚本攻击漏洞。远程攻击者可借助REF_URL参数注入任意web脚本或HTML。
solution:Upgrade expinion.net member_management_system to a higher version than 4.0,and avoid the version 4.0