CVE:CVE-2004-2084
CNNVD:CNNVD-200402-031
JShop E-Commerce服务器中的search.php存在跨站脚本（XSS）漏洞。远程攻击者可以通过xSearch参数注入任意的 web脚本或者HTML。
solution:Upgrade jshop_e-commerce jshop_professional to a higher version than 3.0,3.1,3.2,3.3,3.4,and avoid the version 3.0,3.1,3.2,3.3,3.4; Upgrade jshop_e-commerce jshop_server to a higher version than 1.0.1,1.0.2,1.0.3,1.0.4,1.1.0,1.2.0,and avoid the version 1.0.1,1.0.2,1.0.3,1.0.4,1.1.0,1.2.0