CVE:CVE-2012-2985
CNNVD:CNNVD-201208-303
CuteSoft Cute Editor 6.4版本中的InsertDocument.aspx中存在跨站脚本(XSS)漏洞。远程认证攻击者利用该漏洞通过‘ _UploadID’参数注入任意web脚本或HTML。
solution:Upgrade cutesoft_components cute_editor to a higher version than 6.4,and avoid the version 6.4