CVE:CVE-2007-4078
CNNVD:CNNVD-200707-552
AlstraSoft Text Ads 企业版中存在多个跨站脚本攻击漏洞。远程攻击者可以借助(1)对(a)forgot_uid.php的r参数,(2)query或(3)对(b)search_results.php的sk参数或(4)对(c)website_page.php的pageid参数，注入任意web脚本或HTML。
solution:Upgrade alstrasoft text_ads_enterprise to a higher version than 2.1,and avoid the version 2.1