CVE:CVE-2006-2311
CNNVD:CNNVD-200606-503
适用于Windows的BlueDragon Server和Server JX 6.2.1.286中的跨站脚本攻击(XSS)漏洞，远程攻击者借助对(1) .cfm或(2) .cfml文件请求中的文件名在默认错误页面中反映结果，以此注入任意Web脚本或HTML。
solution:Upgrade new_atlanta_communications bluedragon_server to a higher version than 6.2.1.286,and avoid the version 6.2.1.286; Upgrade new_atlanta_communications bluedragon_server_jx to a higher version than 6.2.1.286,and avoid the version 6.2.1.286