CVE:CVE-2008-4535
CNNVD:CNNVD-200810-173
EC-CUBE Ver2, EC-CUBE Ver2 Beta(RC), 和EC-CUBE Community Edition Nighly-Build中存在跨站脚本攻击漏洞，远程攻击者可以通过未明向了来执行任意web脚本或HTML。
solution:Upgrade ec-cube ec-cube to a higher version than 2.1.2a,2.3.0,1.0,1.4.7,1.5.0:b2,and avoid the version (,2.1.2a],(,2.3.0],1.0,1.4.7,1.5.0:b2