CVE:CVE-2010-3489
CNNVD:CNNVD-201009-237
CMS Digital Workroom (Netautor Professional) 5.5.0版本中的netautor/napro4/home/login2.php文件中存在跨站脚本攻击漏洞。远程攻击者可以借助goback参数注入任意web脚本或者HTML。
solution:Upgrade digitalworkroom cms_digital_workroom to a higher version than 5.3.1,5.5.0,and avoid the version 5.3.1,5.5.0