CVE:CVE-2009-4266
CNNVD:CNNVD-200912-141
YABSoft Advanced Image Hosting (AIH) Script中的search.php中存在跨脚本漏洞, 远程攻击者可以借助text参数注入任意web脚本或HTML。
solution:Upgrade yabsoft advanced_image_hosting_script to a higher version than 2.2,2.3,and avoid the version 2.2,2.3