CVE:CVE-2006-1436
CNNVD:CNNVD-200604-251
UPOINT @1 Event Publisher中存在多个跨站脚本攻击漏洞。这使得远程攻击者可以借助于(a) eventpublisher_admin.htm和(b) eventpublisher_usersubmit.htm中的字段(1) Event、(2) Description、(3) Time、(4) Website以及(5) Public Remarks注入任意Web脚本或HTML。
solution:Upgrade upoint at1_event_publisher to a higher version than 2003-12-18,and avoid the version 2003-12-18