CVE:CVE-2006-3264
CNNVD:CNNVD-200606-544
Namo DeepSearch 4.5中的mclient.cgi存在跨站脚本攻击(XSS)漏洞。远程攻击者通过p参数注入任意Web脚本或HTML。
solution:Upgrade namo deepsearch to a higher version than 4.5,and avoid the version 4.5