CVE:CVE-2007-3299
CNNVD:CNNVD-200706-321
AWFFull中存在跨站脚本攻击漏洞。当AllSearchStr(又称All Search Terms report)被启用时，远程攻击者可以借助一个搜索字符串，注入任意的web脚本或HTML。
solution:Upgrade awffull awffull to a higher version than 3.7.1,and avoid the version (,3.7.1]