CVE:CVE-2008-2527
CNNVD:CNNVD-200806-042
ActualScripts ActualAnalyzer Server 8.37以及之前的版本，ActualAnalyzer Gold 7.74以及之前的版本，ActualAnalyzer Pro 6.95以及之前的版本和ActualAnalyzer Lite 2.78以及之前的版本中的view.php存在跨站脚本攻击漏洞。远程攻击者可以借助语言参数，注入任意的web脚本或HTML。
solution:Upgrade actualscripts actualanalyzer_gold to a higher version than 7.21,7.22,7.23,7.24,7.25,7.31,7.32,7.33,7.34,7.35,7.41,7.42,7.43,7.51,7.61,7.62,7.63,7.64,7.71,7.72,7.73,7.74,and avoid the version 7.21,7.22,7.23,7.24,7.25,7.31,7.32,7.33,7.34,7.35,7.41,7.42,7.43,7.51,7.61,7.62,7.63,7.64,7.71,7.72,7.73,7.74; Upgrade actualscripts actualanalyzer_lite to a higher version than 2.78,2.77,and avoid the version (,2.78],2.77; Upgrade actualscripts actualanalyzer_pro to a higher version than 6.95,6.65,6.67,6.68,6.69,6.71,6.72,6.73,6.81,6.82,6.83,6.85,6.86,6.87,6.88,6.89,6.91,6.92,6.93,6.94,and avoid the version (,6.95],6.65,6.67,6.68,6.69,6.71,6.72,6.73,6.81,6.82,6.83,6.85,6.86,6.87,6.88,6.89,6.91,6.92,6.93,6.94; Upgrade actualscripts actualanalyzer_server to a higher version than 8.37,8.02,8.11,8.21,8.22,8.23,8.24,8.25,8.31,8.32,8.33,8.34,8.35,8.36,and avoid the version (,8.37],8.02,8.11,8.21,8.22,8.23,8.24,8.25,8.31,8.32,8.33,8.34,8.35,8.36