CVE:CVE-2008-1342
CNNVD:CNNVD-200803-235
Polymita BPM-Suite 和 CollagePortal的search feature存在的多个跨站脚本攻击漏洞。远程攻击者通过(1) _q和 (2) lucene_index_field_value 参数来注入任意web脚本或HTML。
solution:Upgrade polymita_technologies bpm_suite to a higher version than *; Upgrade polymita_technologies collageportal to a higher version than *