CVE:CVE-2004-1196
CNNVD:CNNVD-200501-052
Insite Inmail是一套WebMail系统。
Insite Inmail的inmail.pl中存在跨站点脚本攻击漏洞。
远程攻击者可以利用acao参数，注入任意的web脚本或HTML。
solution:Upgrade insite inmail to a higher version than *; Upgrade insite inshop to a higher version than *