CVE:CVE-2009-1321
CNNVD:CNNVD-200904-362
ASP Product Catalog 1.0版本中的search.asp存在跨站脚本攻击漏洞。远程攻击者可以借助关键词参数，注入任意的web脚本或HTML。
solution:Upgrade humayun_shabbir_bhutta asp_product_catalog to a higher version than 1.0,and avoid the version 1.0