CVE:CVE-2010-5018
CNNVD:CNNVD-201111-084
2daybiz Online Classified Script的products/classified/headersearch.php中存在跨站脚本攻击漏洞。远程攻击者可借助sid参数注入任意web脚本或者HTML。
solution:Upgrade 2daybiz online_classified_script to a higher version than *
solution:Upgrade silverstripe silverstripe to a higher version than 2.3.0,2.3.0:rc1,2.3.0:rc2,2.3.0:rc3,2.3.1,2.3.1:rc1,2.3.1:rc2,2.3.2,2.3.3,2.3.4,2.3.5,2.3.6,2.3.7,2.4.0,and avoid the version 2.3.0,2.3.0:rc1,2.3.0:rc2,2.3.0:rc3,2.3.1,2.3.1:rc1,2.3.1:rc2,2.3.2,2.3.3,2.3.4,2.3.5,2.3.6,2.3.7,2.4.0