CVE:CVE-2008-5719
CNNVD:CNNVD-200812-443
Active Server Pages 06-52-/C之前的版本的Hitachi Groupmax Web Workflow SDK Set以及Active Server Pages 06-52-/A之前的版本的Hitachi Groupmax Workflow - Development Kit中存在跨站脚本攻击漏洞。远程攻击者可以借助未知向量，注入任意web脚本或HTML。
solution:Upgrade hitachi groupmax_web_workflow_sdk_set_for_active_server_pages to a higher version than 06-52_b,03-10,03-10_a,03-10_b,03-10_c,03-10_d,05-00,05-00_a,05-00_b,05-00_c,05-00_d,05-10,05-10_a,05-10_b,05-10_c,05-11,05-11_a,05-11_b,05-11_c,05-11_d,05-11_e,05-20,05-20_a,05-20_b,05-20_c,06-00,06-01,06-02,06-03,06-03_a,06-50,06-51,06-52,06-52_a,and avoid the version (,06-52_b],03-10,03-10_a,03-10_b,03-10_c,03-10_d,05-00,05-00_a,05-00_b,05-00_c,05-00_d,05-10,05-10_a,05-10_b,05-10_c,05-11,05-11_a,05-11_b,05-11_c,05-11_d,05-11_e,05-20,05-20_a,05-20_b,05-20_c,06-00,06-01,06-02,06-03,06-03_a,06-50,06-51,06-52,06-52_a; Upgrade hitachi groupmax_workflow_to_development_kit_for_active_server_pages to a higher version than 06-52,3-10,3-10_a,3-10_b,05-00,05-00_a,05-00_b,05-10,05-10_a,05-11,05-11_a,05-20,05-20_a,06-00,06-01,06-02,06-03,06-03_a,06-50,06-51,and avoid the version (,06-52],3-10,3-10_a,3-10_b,05-00,05-00_a,05-00_b,05-10,05-10_a,05-11,05-11_a,05-20,05-20_a,06-00,06-01,06-02,06-03,06-03_a,06-50,06-51