CVE:CVE-2007-5798
CNNVD:CNNVD-200711-032
IBM WebSphere Application Server (WAS)的UDDI用户控制台的uddigui/navigateTree.do中存在多个跨站脚本攻击漏洞。远程攻击者可以借助(1) keyField, (2) nameField, (3) valueField, 和 (4) frameReturn参数，注入任意web脚本或HTML。
solution:Upgrade ibm websphere_application_server to a higher version than 6.1.0.12,and avoid the version (,6.1.0.12]