CVE:CVE-2006-0193
CNNVD:CNNVD-200601-145
Positive Software H-Sphere 2.4.3 Patch 8及更早版本的Hosting Control Panel (psoft.hsphere.CP)中存在跨站脚本攻击(XSS)漏洞，远程攻击者可以通过登录操作中的登录参数注入任意Web脚本或HTML。
solution:Upgrade positive_software h-sphere to a higher version than 2.4.1,2.4.1_patch_1,2.4.1_patch_2,2.4.1_patch_3,2.4.1_patch_4,2.4.1_patch_5,2.4.1_patch_6,2.4.1_patch_7,2.4.2,2.4.2_beta_1,2.4.2_beta_2,2.4.2_beta_3,2.4.2_patch_1,2.4.2_patch_2,2.4.2_patch_3,2.4.2_patch_4,2.4.2_patch_5,2.4.2_rc1,2.4.2_rc2,2.4.3,2.4.3_beta_1,2.4.3_beta_2,2.4.3_patch_1,2.4.3_patch_2,2.4.3_patch_3,2.4.3_patch_4,2.4.3_patch_5,2.4.3_patch_6,2.4.3_patch_7,2.4.3_patch_8,2.4.3_rc1,2.4.3_rc2,and avoid the version 2.4.1,2.4.1_patch_1,2.4.1_patch_2,2.4.1_patch_3,2.4.1_patch_4,2.4.1_patch_5,2.4.1_patch_6,2.4.1_patch_7,2.4.2,2.4.2_beta_1,2.4.2_beta_2,2.4.2_beta_3,2.4.2_patch_1,2.4.2_patch_2,2.4.2_patch_3,2.4.2_patch_4,2.4.2_patch_5,2.4.2_rc1,2.4.2_rc2,2.4.3,2.4.3_beta_1,2.4.3_beta_2,2.4.3_patch_1,2.4.3_patch_2,2.4.3_patch_3,2.4.3_patch_4,2.4.3_patch_5,2.4.3_patch_6,2.4.3_patch_7,2.4.3_patch_8,2.4.3_rc1,2.4.3_rc2