CVE:CVE-2008-5338
CNNVD:CNNVD-200812-062
Bandwebsite是一款基于PHP和MYSQL实现的在线门户网站系统。
Bandwebsite (又称Bandsite portal system) 1.5版本的info.php中存在跨站脚本攻击漏洞。远程攻击者可以借助会话参数，注入任意web脚本或HTML。
solution:Upgrade multimania bandsite_portal_system to a higher version than 1.5,and avoid the version 1.5; Upgrade multimania bandwebsite to a higher version than 1.5,and avoid the version 1.5
solution:Upgrade prestashop prestashop to a higher version than 1.0,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.8.5.1,0.9,0.9.1:rc1,0.9.1:rc2,0.9.2,0.9.5,0.9.6,0.9.7,1.0.0.1,1.0.0.2,1.0.0.3,1.0.0.4,1.0.0.5,and avoid the version (,1.0],0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.8.5.1,0.9,0.9.1:rc1,0.9.1:rc2,0.9.2,0.9.5,0.9.6,0.9.7,1.0.0.1,1.0.0.2,1.0.0.3,1.0.0.4,1.0.0.5