CVE:CVE-2011-5040
CNNVD:CNNVD-201112-508
Infoproject Biznis Heroj中存在多个跨站脚本漏洞。远程攻击者可借助config参数在(1) nalozi_naslov.php和(2) widget.dokumenti_lista.php中注入任意wb脚本或HTML代码。
solution:Upgrade infoproject biznis_heroj to a higher version than *