CVE:CVE-2007-5426
CNNVD:CNNVD-200710-234
ActiveKB NX 2.5.4版本中存在多个跨站脚本攻击漏洞。远程攻击者可以借助对某些目录的默认URI的页参数，例如(1) ActiveKB/ 和 (2) default/categories/ActiveKB/，注入任意web脚本或HTML。
solution:Upgrade interspire activekb_nx to a higher version than 2.5.4,and avoid the version 2.5.4