CVE:CVE-2005-4530
CNNVD:CNNVD-200512-564
AlstraSoft EPay Enterprise 3.0 (之前的DoPays)存在多个跨站脚本攻击漏洞， 远程攻击者可以通过多个(1)profile.htm，(2)card.htm，(3)bank.htm，(4)subscriptions.htm，(5)send.htm，(6)request.htm， (7)forgot.htm，(8)escrow.htm，(9)donations.htm和(10)products.htm内的未明参数执行任意web代码或HTML。
solution:Upgrade alstrasoft epay to a higher version than 3.0,and avoid the version 3.0