CVE:CVE-2005-4372
CNNVD:CNNVD-200512-428
Adaptive Website Framework (AWF) 2.10及其更早版本中的account.html存在跨站脚本攻击漏洞。远程攻击者可以借助page参数注入任意的Web脚本或HTML。
solution:Upgrade liquid_bytes_technologies adaptive_website_framework to a higher version than 1.11,2.00,2.01,2.10,and avoid the version 1.11,2.00,2.01,2.10