CVE:CVE-2005-3972
CNNVD:CNNVD-200512-049
Extreme Search Corporate Edition 6.0 及更早版本的extremesearch.php中存在跨站脚本攻击漏洞，远程攻击者可以通过search参数注入任意Web脚本或HTML。
solution:Upgrade extreme_corporate extreme_search to a higher version than corporate_6.0,and avoid the version (,corporate_6.0]