CVE:CVE-2009-4995
CNNVD:CNNVD-201008-292
SmarterTools SmarterTrack 4.0.3504之前版本中的frmKBSearch.aspx中存在跨站脚本攻击(XSS)漏洞。远程攻击者可以借助电子邮件地址字段注入任意web脚本或HTML。
solution:Upgrade smartertools smartertrack to a higher version than 4.0.3483,3.0.3040,3.1.3050,3.1.3089,3.5.3126,3.5.3159,3.5.3167,3.6.3216,3.6.3217,3.6.3229,3.6.3246,3.6.3267,3.6.3274,3.6.3309,3.6.3355,3.6.3411,3.6.3413,4.0.3387,4.0.3399,4.0.3411,4.0.3413,4.0.3435,and avoid the version (,4.0.3483],3.0.3040,3.1.3050,3.1.3089,3.5.3126,3.5.3159,3.5.3167,3.6.3216,3.6.3217,3.6.3229,3.6.3246,3.6.3267,3.6.3274,3.6.3309,3.6.3355,3.6.3411,3.6.3413,4.0.3387,4.0.3399,4.0.3411,4.0.3413,4.0.3435