CVE:CVE-2002-2073
CNNVD:CNNVD-200212-140
基于Windows NT 4.0版本的Microsoft Site Server 3.0版本的默认ASP页存在跨站脚本（XSS）漏洞。远程攻击者借助(1)Default.asp的ctr参数和(2)formslogin.asp的查询字符串注入任意web脚本或者HTML。
solution:Upgrade microsoft site_server to a higher version than 3.0,and avoid the version 3.0; Upgrade microsoft site_server_commerce to a higher version than 3.0,and avoid the version 3.0; Upgrade microsoft windows_nt to a higher version than 4.0,and avoid the version 4.0