CVE:CVE-2004-2566
CNNVD:CNNVD-200412-1141
LiveWorld可能包含(1)LiveForum，(2)LiveQ&A，(3)LiveChat，和(4)LiveFocusGroup的产品存在多个跨站脚本漏洞。远程攻击者借助(a)search.jsp，(b)findclub!execute.jspa，和(c) search!execute.jspa的q参数注入任意web脚本或者HTML。
solution:Upgrade liveworld livechat to a higher version than *; Upgrade liveworld livefocusgroup to a higher version than *; Upgrade liveworld liveforum to a higher version than *; Upgrade liveworld liveq_and_a to a higher version than *