CVE:CVE-2006-1496
CNNVD:CNNVD-200603-477
在ViHor Design的index.php中存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可通过以下途径注入任意web脚本或HTML：(1)在page参数中的一个URL地址，它由一个fopen调用处理，或(2) HTML或page参数中的脚本，它从一个失败的fopen调用出错信息中返回用户。
solution:Upgrade vihor vihordesign to a higher version than *
solution:Upgrade xerox copycentre_c65_firmware to a higher version than 1.001.02.073,1.001.02.715,and avoid the version (,1.001.02.073],[1.001.02.074,1.001.02.715); Upgrade xerox copycentre_c75_firmware to a higher version than 1.001.02.073,1.001.02.715,and avoid the version (,1.001.02.073],[1.001.02.074,1.001.02.715); Upgrade xerox copycentre_c90_firmware to a higher version than 1.001.02.073,1.001.02.715,and avoid the version (,1.001.02.073],[1.001.02.074,1.001.02.715); Upgrade xerox workcentre_pro_65_firmware to a higher version than 1.001.02.073,1.001.02.715,and avoid the version (,1.001.02.073],[1.001.02.074,1.001.02.715); Upgrade xerox workcentre_pro_75_firmware to a higher version than 1.001.02.073,1.001.02.715,and avoid the version (,1.001.02.073],[1.001.02.074,1.001.02.715); Upgrade xerox workcentre_pro_90_firmware to a higher version than 1.001.02.073,1.001.02.715,and avoid the version (,1.001.02.073],[1.001.02.074,1.001.02.715)