CVE:CVE-2008-0207
CNNVD:CNNVD-200801-142
Multiple cross-site scripting (XSS) vulnerabilities in PRO-Search 0.17以及更早版本中的多个跨站脚本漏洞允许远程攻击者借助以下几种方式注入任意的Web脚本或HTML：(1) prot, (2) host, (3) path, (4) name, (5) ext, (6) size, (7) search_days, or (8) 默认 URI中的 show_page参数
solution:Upgrade pro_search pro_search to a higher version than 0.17,and avoid the version (,0.17]