CVE:CVE-2006-5626
CNNVD:CNNVD-200610-541
phpFaber Content Management System (CMS)的cms_images/js/htmlarea/htmlarea.php中存在跨站脚本攻击漏洞，远程攻击者可能通过查询字符串中的任意参数注入任意Web脚本或HTML，例如通过vigilon参数即可触发此漏洞。
solution:Upgrade phpfaber phpfaber_content_management_system to a higher version than 1.3.36,and avoid the version (,1.3.36]