CVE:CVE-2009-4924
CNNVD:CNNVD-201007-003
Dan Pascu python-cjson 1.0.5版本没有正确处理传递给cjson.encode的['/']参数，远程攻击者可以很容易的引起跨站脚本攻击，攻击涉及Firefox和SCRIPT元素的结束标签。
solution:Upgrade dan_pascu python-cjson to a higher version than 1.0.5,and avoid the version 1.0.5
solution:Upgrade saini videocache to a higher version than 1.9.2,and avoid the version 1.9.2