CVE:CVE-2002-0257
CNNVD:CNNVD-200205-074
MakeBid Auction Deluxe 3.30的auction.pl存在跨站脚本攻击（XSS）漏洞。远程攻击者可以借助一下表单字段获取其他用户的信息(1) TITLE，(2) DESCTIT，(3) DESC，(4) searchstring，(5) ALIAS，(6) EMAIL，(7) ADDRESS1，(8) ADDRESS2，(9) ADDRESS3，(10) PHONE1，(11) PHONE2，(12) PHONE3，或(13) PHONE4。
solution:Upgrade apache http_server to a higher version than 1.3.17,1.3.18,1.3.19,1.3.20,1.3.22,and avoid the version 1.3.17,1.3.18,1.3.19,1.3.20,1.3.22; Upgrade usanet_creations makebid_auction_deluxe to a higher version than 3.30,and avoid the version 3.30