CVE:CVE-2005-4413
CNNVD:CNNVD-200512-478
IBM WebSphere Application Server 6的示例脚本中存在多个跨站脚本攻击漏洞，远程攻击者可以通过到(a) PlantsByWebSphere/login.jsp的(1)电子邮件地址字段，到(b)TechnologySample/BulletinBoard Script的(3)消息字段，到(c)TechnologySamples/Subscriptiond的(3)电子邮件地址字段和到(d) TechnologySamples/MovieReview2_1的(4)影片名(5)影片评论员和(6)影片评论字段注入任意Web脚本或HTML。
solution:Upgrade ibm websphere_application_server to a higher version than 6.0,and avoid the version 6.0