CVE:CVE-2002-1680
CNNVD:CNNVD-200212-256
CGI Online Worldweb Shopping 1.1版本(也称为 COWS)存在跨站脚本(XSS)漏洞。远程攻击者可以和其他用户一样通过注入脚本到(1) diagnose.cgi 或(2) compatible.cgi中执行任意脚本。
solution:Upgrade cows cgi_online_worldweb_shopping to a higher version than 1.1,and avoid the version 1.1