CVE:CVE-2003-1088
CNNVD:CNNVD-200308-049
Zorum 3.4和3.5版本的index.php存在跨站脚本（XSS)漏洞。远程攻击者借助method参数注入任意web脚本或者HTML。
solution:Upgrade phpoutsourcing zorum to a higher version than 3.0,3.1,3.2,3.3,3.4,3.5,and avoid the version 3.0,3.1,3.2,3.3,3.4,3.5