CVE:CVE-2008-3935
CNNVD:CNNVD-200809-091
DIC shop_v50 3.0以及之前的版本和shop_v52 2.0以及之前的版本存在跨站脚本攻击漏洞。远程攻击者可以借助未明向量，注入任意的web脚本或HTML。
solution:Upgrade d-ic shop_v50 to a higher version than 3.0,and avoid the version (,3.0]; Upgrade d-ic shop_v52 to a higher version than 2.0,and avoid the version (,2.0]