CVE:CVE-2007-5434
CNNVD:CNNVD-200710-246
PRO-search 0.17.1中存在跨站脚本攻击漏洞。远程攻击者可以借助对默认URI的q参数，注入任意web脚本或HTML。
solution:Upgrade pro.setun pro-search to a higher version than 0.17.1,and avoid the version (,0.17.1]