CVE:CVE-2018-18437
CNNVD:CNNVD-201810-1203
AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0版本中的secret/relogoff.aspx文件存在跨站脚本漏洞。远程攻击者可借助‘Error_Desc’参数利用该漏洞注入任意的Web脚本或HTML。
solution:Upgrade axiositalia registro_elettronico to a higher version than 1.7.0,and avoid the version 1.7.0