CVE:CVE-2008-3850
CNNVD:CNNVD-200808-349
Accellion File Transfer是一套基于网络的文件传输/同步系统。
Accellion File Transfer FTA_7_0_135版本存在跨站脚本攻击漏洞。
远程攻击者可以借助到courier/forgot_password.html的PATH_INFO，注入任意的web脚本或HTML。
solution:Upgrade accellion secure_file_transfer_appliance to a higher version than 7_0_135,and avoid the version 7_0_135