CVE:CVE-2005-4248
CNNVD:CNNVD-200512-314
QuickPayPro 3.1中存在多个跨站脚本攻击漏洞，远程攻击者可以通过(1) communication/subscribers.tracking.add.php， (2) support/tickets.add.php和(3) mycompany/categories.php等多种字段注入任意Web脚本或HTML。
solution:Upgrade quickpaypro quickpaypro to a higher version than 3.1,and avoid the version 3.1