CVE:CVE-2007-4144
CNNVD:CNNVD-200708-028
MitriDAT eMail Form Processor Pro的sample-forms/simple-contact-form-with-preview/simple-contact-form-with-preview.html中存在跨站脚本攻击漏洞。远程攻击者可以借助base_path参数,注入任意web脚本或HTML。该漏洞与(1)产品的PHP版本中的formprocessorpro.php以及(2)产品Perl版本的 formprocessorpro.pl相关。
solution:Upgrade mitridat form_processor_pro to a higher version than 4.0,and avoid the version (,4.0]