CVE:CVE-2005-2202
CNNVD:CNNVD-200507-106
MicroServer Web Server是Web服务端程序。
Xerox WorkCentre Pro Color 2128、2636和3545的0.001.04.044至0.001.04.504版本中使用的MicroServer Web Server存在跨站脚本攻击漏洞。
远程攻击者可通过未知的攻击方式注入任意Web脚本或HTML。
solution:Upgrade xerox workcentre_2128 to a higher version than 0.001.04.044,0.001.04.504,and avoid the version 0.001.04.044,0.001.04.504; Upgrade xerox workcentre_2636 to a higher version than 0.001.04.044,0.001.04.504,and avoid the version 0.001.04.044,0.001.04.504; Upgrade xerox workcentre_3545 to a higher version than 0.001.04.044,0.001.04.504,and avoid the version 0.001.04.044,0.001.04.504