CVE:CVE-2010-3926
CNNVD:CNNVD-201101-119
SGX-SP Final 11.00之前版本和SGX-SP Final NE 11.00之前版本中的Shop.cgi中存在多个跨站脚本攻击漏洞。远程攻击者可以借助未明向量注入任意web脚本或者HTML。
solution:Upgrade wb-i sgx-sp_final to a higher version than 10.00,and avoid the version (,10.00]; Upgrade wb-i sgx-sp_final_ne to a higher version than 10.00,and avoid the version (,10.00]