CVE:CVE-2012-4352
CNNVD:CNNVD-201302-331
Stoneware webNetwork是一款企业私有云解决方案。
Stoneware webNetwork SP1之前的6.1版本中存在多个跨站脚本漏洞。通过blogName参数传送到(1)community/blog.jsp或(2)community/blogSearch.jsp脚本；或(3)calendarType或(4)monthNumbe参数传送到community/calendar.jsp脚本；或(5)flag参数传送到swDashboard/ajax/setAppFlag.jsp脚本，远程攻击者利用这些漏洞注入任意web脚本或HTML。
solution:Upgrade stone-ware webnetwork to a higher version than 6.1,and avoid the version 6.1