CVE:CVE-2006-3320
CNNVD:CNNVD-200606-603
SiteBar 3.3.8及更早版本的command.php中的跨站脚本攻击(XSS)漏洞。远程攻击者通过command参数注入任意Web脚本或HTML。
solution:Upgrade sitebar sitebar to a higher version than 3.3.8,3.3.2,3.3.3,3.3.4,3.3.5,3.3.6,3.3.7,and avoid the version (,3.3.8],3.3.2,3.3.3,3.3.4,3.3.5,3.3.6,3.3.7