CVE:CVE-2010-4757
CNNVD:CNNVD-201103-201
e107是e107团队开发的的一套开源、免费且基于PHP和MySQL的内容管理系统（CMS）。该系统支持多种插件和外观主题，可作为个人博客、讨论社区、档案资料库等。
e107 0.7.23之前版本中的submitnews.php中存在跨站脚本攻击漏洞。远程攻击者可以借助submitnews_title参数注入任意web脚本或者HTML。
solution:Upgrade e107 e107 to a higher version than 0.7.22,0.6_10,0.6_11,0.6_12,0.6_13,0.6_14,0.6_15,0.6_15a,0.7,0.7.0,0.7.1,0.7.2,0.7.3,0.7.4,0.7.5,0.7.6,0.7.7,0.7.8,0.7.9,0.7.10,0.7.11,0.7.12,0.7.13,0.7.14,0.7.15,0.7.16,0.7.17,0.7.18,0.7.19,0.7.20,0.7.21,0.545,0.547:beta,0.548:beta,0.549:beta,0.551:beta,0.552:beta,0.553:beta,0.554,0.554:beta,0.555:beta,0.600,0.601,0.602,0.603,0.604,0.605,0.606,0.607,0.608,0.609,0.610,0.611,0.612,0.613,0.614,0.615,0.615a,0.616,0.617,0.6171,0.6172,0.6173,0.6174,0.6175,and avoid the version (,0.7.22],0.6_10,0.6_11,0.6_12,0.6_13,0.6_14,0.6_15,0.6_15a,0.7,0.7.0,0.7.1,0.7.2,0.7.3,0.7.4,0.7.5,0.7.6,0.7.7,0.7.8,0.7.9,0.7.10,0.7.11,0.7.12,0.7.13,0.7.14,0.7.15,0.7.16,0.7.17,0.7.18,0.7.19,0.7.20,0.7.21,0.545,0.547:beta,0.548:beta,0.549:beta,0.551:beta,0.552:beta,0.553:beta,0.554,0.554:beta,0.555:beta,0.600,0.601,0.602,0.603,0.604,0.605,0.606,0.607,0.608,0.609,0.610,0.611,0.612,0.613,0.614,0.615,0.615a,0.616,0.617,0.6171,0.6172,0.6173,0.6174,0.6175