CVE:CVE-2006-3273
CNNVD:CNNVD-200606-571
Some Chess 1.5 rc1的menu.php中的跨站脚本攻击(XSS)漏洞。远程攻击者通过user参数("新名称"字段)注入任意Web脚本或HTML。
solution:Upgrade astrodog_press some_chess to a higher version than 1.5_rc1,and avoid the version 1.5_rc1