CVE:CVE-2006-3241
CNNVD:CNNVD-200606-509
XennoBB 1.0.5及更早版本的messages.php中的跨站脚本攻击(XSS)漏洞，可让远程攻击者通过tid参数注入任意Web脚本或HTML。
solution:Upgrade xennobb xennobb to a higher version than 1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,and avoid the version 1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5