CVE:CVE-2004-0534
CNNVD:CNNVD-200409-047
用于WebIntelligence 2.7.0至2.7.4版本的Business Objects InfoView 5.1.4 至5.1.8版本中存在跨站脚本（XSS）漏洞。远程攻击者上传文件时可以借助文件名注入任意web脚本或HTML。
solution:Upgrade businessobjects infoview to a higher version than 5.1.4,5.1.5,5.1.6,5.1.7,5.1.8,and avoid the version 5.1.4,5.1.5,5.1.6,5.1.7,5.1.8; Upgrade businessobjects webintelligence to a higher version than 2.7,2.7.1,2.7.2,2.7.3,2.7.4,and avoid the version 2.7,2.7.1,2.7.2,2.7.3,2.7.4