CVE:CVE-2017-17937
CNNVD:CNNVD-201712-1058
Vanguard Marketplace Digital Products PHP是一套基于PHP的MP3等数字文件在线交易网站脚本。
Vanguard Marketplace Digital Products PHP中存在跨站脚本漏洞。远程攻击者可通过向/search发送‘phps_query’参数利用该漏洞向/search发送‘phps_query’参数利用该漏洞注入任意的Web脚本或HTML。
solution:Upgrade vanguard_project marketplace_digital_products_php to a higher version than 1.9,and avoid the version (,1.9]