CVE:CVE-2010-2040
CNNVD:CNNVD-201005-346
V-EVA Shopzilla Affiliate Script PHP的脚本search.php存在跨站脚本攻击漏洞。远程攻击者可以借助s参数注入任意的web脚本和HTML。
solution:Upgrade v-eva shopzilla_affiliate_script_php to a higher version than *