CVE:CVE-2006-5830
CNNVD:CNNVD-200611-167
All In One Control Panel (AIOCP) 中存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可以通过传给code/cp_forum_view.php的(1)topid，(2)forid和(3)catid参数；传给cp_dpage.php的(4)choosed_language参数；传给cp_links_search.php的(5)orderdir参数；传给(a)cp_show_ec_products.php和(b)cp_users_online.php的(6)order_field 参数；和在用户概要文件中的(7)signature和(8)fiscal代码字段，来注入任意Web脚本或HTML。
solution:Upgrade aiocp aiocp to a higher version than 1.3.000,1.3.001,1.3.002,1.3.003,1.3.004,1.3.005,1.3.006,1.3.007,and avoid the version 1.3.000,1.3.001,1.3.002,1.3.003,1.3.004,1.3.005,1.3.006,1.3.007