CVE:CVE-2008-3565
CNNVD:CNNVD-200808-115
Meeting Room Booking System (MRBS)是一个基于web的会议室管理系统。
MRBS1.2.6版本存在多个跨站脚本攻击漏洞。远程攻击者可以利用day.php,week.php,month.php,search.php,report.php和help.php的area参数，注入任意的web脚本或HTML。
solution:Upgrade mrbs mrbs to a higher version than 1.2.6,and avoid the version 1.2.6