CVE:CVE-2007-0885
CNNVD:CNNVD-200702-229
具有Zen(Rainbow.Zen)扩展名的Rainbow的jira/secure/BrowseProject.jspa中存在跨站脚本攻击漏洞。远程攻击者可以借助id参数，注入任意web脚本或HTML。
solution:Upgrade rainbow_portal rainbow.zen to a higher version than *; Upgrade rainbow_portal rainbow_with_the_zen to a higher version than *