CVE:CVE-2007-2976
CNNVD:CNNVD-200705-584
Centrinity FirstClass 8.3及之前版本和Server and Internet Services 没有正确的处理包含有无效字符("%00")的URL，这使得远程攻击者可以执行跨站脚本攻击。
solution:Upgrade cetrinity firstclass to a higher version than 8.3,and avoid the version (,8.3]; Upgrade cetrinity server_and_internet_services to a higher version than 8.0,and avoid the version (,8.0]