CVE:CVE-2013-2311
CNNVD:CNNVD-201305-405
web2py是一套使用Python编写的开源Web框架，它支持快速开发基于数据库驱动的Web应用程序。
web2py 2.3.1之前的版本中存在跨站脚本漏洞，该漏洞源于程序对某些未明输入返回给用户之前在applications/welcome/static/js/share.js下没有正确的过滤。攻击者可利用该漏洞在受影响站点上下文中用户浏览器会话中执行任意HTML和脚本代码。
solution:Upgrade web2py web2py to a higher version than 2.2.1,1.16.0,1.17.0,1.18.0,1.19.0,1.20.0,1.21.0,1.22.0,1.23.0,1.24.0,1.25.0,1.26.0,1.27.0,1.28.0,1.29.0,1.30.0,1.31.0,1.40.0,1.41.0,1.42.0,1.43.0,1.44.0,1.45.0,1.46.0,1.47.0,1.48.0,1.49.0,1.50.0,1.51.0,1.52.0,1.53.0,1.54.0,1.55.0,1.56.0,1.56.1,1.56.2,1.56.3,1.56.4,1.57.0,1.58.0,1.59.0,1.60.0,1.61.0,1.62.0,1.63.0,1.63.1,1.63.2,1.63.3,1.63.4,1.63.5,1.64.0,1.64.2,1.64.3,1.64.4,1.65.0,1.65.1,1.65.2,1.65.3-10,1.65.11,1.65.12,1.65.13,1.66.0,1.67.0,1.67.1,1.67.2,1.68.1,1.68.2,1.69.1,1.70.1,1.71.1,1.72.1,1.72.3,1.73.1,1.74.1,1.74.2-4,1.74.5,1.74.6,1.74.7,1.74.8,1.74.9,1.75.1,1.75.2,1.75.3,1.75.4,1.75.5,1.76.1,1.76.2,1.76.3,1.76.4,1.76.5,1.77.1,1.77.2,1.77.3,1.78.1,1.78.3,1.79.1,1.79.2,1.80.1,1.81.1,1.81.2,1.81.3,1.81.4,1.81.5,1.82.1,1.83.1,1.83.2,1.84.1,1.84.4,1.85.1,1.85.3,1.86.1,1.86.3,1.87.1,1.87.2,1.87.3,1.88.1,1.89.1,1.89.5,1.90.1,1.90.2,1.90.4,1.90.5,1.90.6,1.91.1,1.91.2,1.91.5,1.91.6,1.92.1,1.93.1,1.93.2,1.94.1,1.94.2,1.94.3,1.94.4,1.94.5,1.94.6,1.95.1,1.96.1,1.96.2,1.96.4,1.97.1,1.98.1,1.98.2,1.99.1,1.99.2,1.99.3,1.99.4,1.99.5,1.99.7,2.0.1-11,2.1.0,and avoid the version (,2.2.1],1.16.0,1.17.0,1.18.0,1.19.0,1.20.0,1.21.0,1.22.0,1.23.0,1.24.0,1.25.0,1.26.0,1.27.0,1.28.0,1.29.0,1.30.0,1.31.0,1.40.0,1.41.0,1.42.0,1.43.0,1.44.0,1.45.0,1.46.0,1.47.0,1.48.0,1.49.0,1.50.0,1.51.0,1.52.0,1.53.0,1.54.0,1.55.0,1.56.0,1.56.1,1.56.2,1.56.3,1.56.4,1.57.0,1.58.0,1.59.0,1.60.0,1.61.0,1.62.0,1.63.0,1.63.1,1.63.2,1.63.3,1.63.4,1.63.5,1.64.0,1.64.2,1.64.3,1.64.4,1.65.0,1.65.1,1.65.2,1.65.3-10,1.65.11,1.65.12,1.65.13,1.66.0,1.67.0,1.67.1,1.67.2,1.68.1,1.68.2,1.69.1,1.70.1,1.71.1,1.72.1,1.72.3,1.73.1,1.74.1,1.74.2-4,1.74.5,1.74.6,1.74.7,1.74.8,1.74.9,1.75.1,1.75.2,1.75.3,1.75.4,1.75.5,1.76.1,1.76.2,1.76.3,1.76.4,1.76.5,1.77.1,1.77.2,1.77.3,1.78.1,1.78.3,1.79.1,1.79.2,1.80.1,1.81.1,1.81.2,1.81.3,1.81.4,1.81.5,1.82.1,1.83.1,1.83.2,1.84.1,1.84.4,1.85.1,1.85.3,1.86.1,1.86.3,1.87.1,1.87.2,1.87.3,1.88.1,1.89.1,1.89.5,1.90.1,1.90.2,1.90.4,1.90.5,1.90.6,1.91.1,1.91.2,1.91.5,1.91.6,1.92.1,1.93.1,1.93.2,1.94.1,1.94.2,1.94.3,1.94.4,1.94.5,1.94.6,1.95.1,1.96.1,1.96.2,1.96.4,1.97.1,1.98.1,1.98.2,1.99.1,1.99.2,1.99.3,1.99.4,1.99.5,1.99.7,2.0.1-11,2.1.0