CVE:CVE-2007-0477
CNNVD:CNNVD-200701-413
Openads 2.0.10之前的2.0.x和2.3.31之前的2.3(又称Max Media Manager 0.3.31-alpha-pr2之前版本)和phpAdsNew/phpPgAds 2.0.9-pr1之前版本中存在跨站脚本攻击漏洞。远程攻击者可以借助admin-search.php中的关键词参数和(2)affiliate-search.php，注入任意的web脚本或HTML。
solution:Upgrade openads openads to a higher version than 2.3.30,and avoid the version 2.3.30