CVE:CVE-2005-0930
CNNVD:CNNVD-200505-285
Chatness 2.5.1及较早版本的message.php中存在跨站脚本攻击(XSS)漏洞，允许远程攻击者通过message.php的(1)user字段或(2)message参数来注入任意Web脚本或HTML。
solution:Upgrade chatness chatness to a higher version than 2.5,2.5.1,and avoid the version (,2.5],2.5.1