CVE:CVE-2008-0867
CNNVD:CNNVD-200802-391
BEA AquaLogic Interaction和Plumtree Foundation存在跨站脚本攻击漏洞。远程攻击者可以通过 name参数注入任意Web脚本或HTML。
solution:Upgrade bea_systems aqualogic_interaction to a higher version than 6.1,6.1:mp1,and avoid the version 6.1,6.1:mp1; Upgrade bea_systems plumtree_foundation to a higher version than 6.0,6.0:sp1,and avoid the version 6.0,6.0:sp1