CVE:CVE-2009-2947
CNNVD:CNNVD-200909-283
Xapian Omega 1.0.16版本之前的版本中存在跨站脚本攻击漏洞。远程攻击者可以借助未知CGI参数值，注入任意WEB脚本或HTML。这些未知CGI参数值有时候会包含在在异常信息中。
solution:Upgrade xapian omega to a higher version than 1.0.15,0.8.0,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.9.0,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.8,0.9.9,0.9.10,1.0.0,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.10,1.0.11,1.0.12,1.0.13,1.0.14,and avoid the version (,1.0.15],0.8.0,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.9.0,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.8,0.9.9,0.9.10,1.0.0,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.10,1.0.11,1.0.12,1.0.13,1.0.14