CVE:CVE-2008-1045
CNNVD:CNNVD-200802-479
Alkacon OpenCMS的system/workplace/views/explorer/tree_files.jsp中的file tree navigation函数存在跨站脚本漏洞。远程攻击者可以借助resource参数注入任意的Web脚本或HTML。
solution:Upgrade alkacon opencms to a higher version than 7.0.3,and avoid the version 7.0.3