CVE:CVE-2007-1367
CNNVD:CNNVD-200703-282
Avaya Communications Manager (CM) 3.1.3之前的S87XX，S8500和S8300产品中的登录页存在跨站脚本攻击漏洞。远程攻击者可以借助登录字段，注入任意的web脚本或HTML。
solution:Upgrade avaya s8710 to a higher version than cm_2.0,cm_3.1,r2.0.0,r2.0.1,and avoid the version cm_2.0,cm_3.1,r2.0.0,r2.0.1; Upgrade avaya s8300 to a higher version than cm_2.0,cm_3.1,r2.0.0,r2.0.1,and avoid the version cm_2.0,cm_3.1,r2.0.0,r2.0.1; Upgrade avaya s8500 to a higher version than cm_2.0,cm_3.1,r2.0.0,r2.0.1,and avoid the version cm_2.0,cm_3.1,r2.0.0,r2.0.1; Upgrade avaya s8700 to a higher version than cm_2.0,cm_3.1,r2.0.0,r2.0.1,and avoid the version cm_2.0,cm_3.1,r2.0.0,r2.0.1