CVE:CVE-2005-4492
CNNVD:CNNVD-200512-553
Starphire SiteSage 5.0.18及更早版本存在跨站脚本攻击漏洞，远程攻击者可以通过未明搜索参数，可能是norelay_highlight_words参数，来注入任意Web脚本或HTML。
solution:Upgrade starphire_technologies sitesage to a higher version than 5.0.18,and avoid the version 5.0.18; Upgrade starphire_technologies sitesage-ee to a higher version than *; Upgrade starphire_technologies sitesage-le to a higher version than *; Upgrade starphire_technologies sitesage-sb to a higher version than *; Upgrade starphire_technologies sitesage-se to a higher version than *