CVE:CVE-2006-0689
CNNVD:CNNVD-200602-219
TTS Time Tracking Software 3.0的注册表单中存在跨站脚本攻击(XSS)漏洞。远程攻击者可以借助UserName参数注入任意Web脚本或HTML。
solution:Upgrade scheduling_management.com time_tracking_software to a higher version than 3.0,and avoid the version 3.0