CVE:CVE-2006-6366
CNNVD:CNNVD-200612-142
Cerberus Helpdesk中的includes/elements/spellcheck/spellwin.php存在跨站脚本攻击(XSS)漏洞，远程攻击者可通过js参数来注入任意Web脚本或HTML。
solution:Upgrade cerberus helpdesk to a higher version than 0.97.3,2.0,2.1,2.2,2.3,2.4,2.5,2.6.1,2.7,2.7.1,3.2.1,3.2.317,3.3,and avoid the version 0.97.3,2.0,2.1,2.2,2.3,2.4,2.5,2.6.1,2.7,2.7.1,3.2.1,3.2.317,3.3