CVE:CVE-2008-1753
CNNVD:CNNVD-200804-158
Alkacon OpenCMS 7.0.3的system/workplace/admin/workplace/sessions.jsp中存在跨站脚本攻击漏洞。远程攻击者通过searchfilter参数来注入任意web脚本或HTML。该漏洞不同于CVE-2008-1510。
solution:Upgrade alkacon opencms to a higher version than 7.0.3,and avoid the version 7.0.3