CVE:CVE-2008-4435
CNNVD:CNNVD-200810-052
Xoops的RMSOFT Downloads Plus (rmdp)模块中存在多个跨站脚本攻击漏洞，远程攻击者可以通过search.php的key参数和down.php的id参数执行任意web脚本或HTML。
solution:Upgrade rmsoft downloads_plus_module to a higher version than 1.5,1.7,and avoid the version 1.5,1.7