CVE:CVE-2004-2193
CNNVD:CNNVD-200412-1145
CJOverkill 4.0.3版本的trade.php存在跨站脚本攻击(XSS)漏洞。远程攻击者借助（1）tms[0]或（2）url参数注入任意web脚本或HTML。
solution:Upgrade cjoverkill cjoverkill to a higher version than 4.0.3,and avoid the version 4.0.3