CNCVE编号：CNCVE-20010824 CVE编号：CAN-2001-0824 安全级别：高 漏洞中文描述： IBM WebSphere 3.02 以及 3.5 FP2中的交叉站点脚本漏洞允许远程攻击者通过把Javascript嵌入到一个对以.JSP文件的请求中或对webapp/examples/ 目录的请求中，这把Javascript插入一个错误页中。 漏洞英文描述： Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/ directory, which inserts the Javasc 漏洞参考： Reference: BUGTRAQ:20010702 Multiple Vendor Java Servlet Container Cross-Site Scripting Vulnerability Reference: URL:http://www.securityfocus.com/archive/1/20010702202828.128B.TAKAGI@etl.go.jp Reference: BID:2969 Reference: URL:http://www.securityf 系统类型： Win2000/NT 漏洞类型：输入有效性检查错误