CVE:CVE-2008-1839
CNNVD:CNNVD-200804-245
WORK system e-commerce 4.0.9的module/main.php中存在多个跨站脚本攻击漏洞。远程攻击者通过(1)天参数,(2)月参数, 以及 (3)年参数来注入任意web脚本或HTML。
solution:Upgrade work_system_e-commerce work_system_e-commerce to a higher version than 4.0.9,and avoid the version 4.0.9