CVE:CVE-2008-1510
CNNVD:CNNVD-200803-422
Alkacon OpenCMS 7.0.3版本中的system/workplace/admin/accounts/users_list.jsp存在跨站脚本攻击漏洞，远程攻击者借助(1)searchfilter或(2)listSearchFilter参数，注入任意的web脚本或HTML。
solution:Upgrade alkacon opencms to a higher version than 7.0.3,and avoid the version 7.0.3