CVE:CVE-2011-1334
CNNVD:CNNVD-201106-320
Cybozu Office 6，Cybozu Garoon 2.0.0至2.1.3，Cybozu Dezie 6.1之前版本，Cybozu MailWise 3.1之前版本，以及Cybozu Collaborex 1.5之前版本中存在跨站脚本攻击漏洞。该漏洞源于某些未明输入还没有经过正确过滤就返回给了用户，这些输入与从电子邮件系统下载图形文件有关，远程攻击者可利用该漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。
solution:Upgrade cybozu office to a higher version than 6,and avoid the version 6; Upgrade cybozu garoon to a higher version than 2.0.0,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0.6,2.1.0,2.1.1,2.1.2,2.1.3,and avoid the version 2.0.0,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0.6,2.1.0,2.1.1,2.1.2,2.1.3; Upgrade cybozu dezie to a higher version than 6.0,1.0,2.0,3.0,4.0,5.0,5.1,and avoid the version (,6.0],1.0,2.0,3.0,4.0,5.0,5.1; Upgrade cybozu mailwise to a higher version than 3.0,1.0,2.0,2.1,and avoid the version (,3.0],1.0,2.0,2.1; Upgrade cybozu collaborex to a higher version than 1.1,1.0,and avoid the version (,1.1],1.0