CVE:CVE-2005-4063
CNNVD:CNNVD-200512-150
NetAuctionHelp 3.0及更早版本中存在多个跨站脚本攻击漏洞，远程攻击者可以通过search.asp的(1) L、(2) sort、(3) category和(4) categoryname参数注入任意HTML和Web脚本。
solution:Upgrade netauctionhelp netauctionhelp to a higher version than 3.0,and avoid the version (,3.0]