CVE:CVE-2007-2499
CNNVD:CNNVD-200705-074
DVDdb 中存在多个跨站脚本攻击漏洞。远程攻击者可以借助提交到loan.php的(1)movieid 参数或到listmovies.php的(2)s参数，注入任意的web脚本或HTML。
solution:Upgrade globalmegacorp dvddb to a higher version than 0.6,and avoid the version (,0.6]