CVE:CVE-2008-1892
CNNVD:CNNVD-200804-307
Blogator-script 0.95和1.01的bs_auth.php存在跨站脚本攻击漏洞。远程攻击者通过msg参数来注入任意web参数或HTML。
solution:Upgrade blogator_script blogator_script to a higher version than 0.95,1.01,and avoid the version 0.95,1.01