CVE:CVE-2008-1793
CNNVD:CNNVD-200804-197
Smart Classified ADS Professional, Smart Photo ADS, 和Smart Photo ADS Gold的view.cgi中存在的多个跨站脚本攻击漏洞。远程攻击者通过(1) AdNum 参数 和 (2) Department参数来注入任意web脚本或HTML。
solution:Upgrade hoffice smart_classified_ads to a higher version than *; Upgrade hoffice smart_photo_ads to a higher version than *; Upgrade hoffice smart_photo_ads_gold to a higher version than *