CVE:CVE-2008-4637
CNNVD:CNNVD-200810-338
cpCommerce存在跨站脚本攻击漏洞，远程攻击者可以借助高级搜索功能中的未知向量，来注入任意的web脚本或HTML。
solution:Upgrade cpcommerce cpcommerce to a higher version than 1.2.3,0.5f,1.0.5,1.0.5.1,1.0.6,1.0.7,1.0.7.1,1.0.7.2,1.0.7.3,1.0.7.4,1.0.8,1.0.9,1.0.9a,1.1.0,1.2.0,1.2.1,1.2.2,and avoid the version (,1.2.3],0.5f,1.0.5,1.0.5.1,1.0.6,1.0.7,1.0.7.1,1.0.7.2,1.0.7.3,1.0.7.4,1.0.8,1.0.9,1.0.9a,1.1.0,1.2.0,1.2.1,1.2.2