CVE:CVE-2006-5827
CNNVD:CNNVD-200611-174
phpComasy CMS的index.php存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可通过(1)用户名或(2)密码参数注入任意Web脚本或HTML。
solution:Upgrade phpcomasy phpcomasy to a higher version than 0.7.4,0.7.5,0.7.9pre,and avoid the version 0.7.4,0.7.5,0.7.9pre