CVE:CVE-2006-6768
CNNVD:CNNVD-200612-583
PWP Technologies The Classified Ad System的default.asp中存在多个跨站脚本攻击(XSS)漏洞。远程攻击者可以借助(1)cat或(2)main参数注入任意Web脚本或HTML。
solution:Upgrade pwp_technologies the_classified_ad_system to a higher version than *