CVE:CVE-2009-0404
CNNVD:CNNVD-200902-051
Bioinformatics htmLawed 1.1.3和1.1.4版本存在多个跨站脚本攻击漏洞。远程攻击者可以借助style属性中无效的Cascading Style Sheets(CSS)表述，注入任意的web脚本或HTML。Internet Explorer 7会对其进行处理。
solution:Upgrade bioinformatics htmlawed to a higher version than 1.1.3,1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.1,1.1.1,1.1.2,and avoid the version (,1.1.3],1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.1,1.1.1,1.1.2