CVE:CVE-2013-4507
CNNVD:CNNVD-201311-066
CollectiveAccess Providence and Pawtucket是一套包含Web访问应用程序和数据管理应用程序的软件。
CollectiveAccess Providence and Pawtucket 1.3及之前的版本中存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade collectiveaccess pawtucket to a higher version than 1.3,1.1,1.2,and avoid the version (,1.3],1.1,1.2; Upgrade collectiveaccess providence to a higher version than 1.3,1.1,1.2,and avoid the version (,1.3],1.1,1.2