CVE:CVE-2006-3308
CNNVD:CNNVD-200606-579
Project EROS bbsengine 20060622-0315之前版本的wpprop代码中的未明漏洞，通过[img]标记具有未知影响和远程攻击向量，可能是跨站脚本攻击(XSS)。
solution:Upgrade zoid_technologies project_eros_bbsengine to a higher version than 2006-06-21,2006-02-23,2006-04-29,2006-05-01,2006-05-09,2006-05-10,2006-05-12,2006-05-19,2006-05-20,and avoid the version (,2006-06-21],2006-02-23,2006-04-29,2006-05-01,2006-05-09,2006-05-10,2006-05-12,2006-05-19,2006-05-20