CVE:CVE-2007-6301
CNNVD:CNNVD-200712-101
OpenNewsletter中的compose.php存在跨站脚本攻击漏洞，远程攻击者可以借助类型参数注入任意web脚本或HTML。
solution:Upgrade open_newsletter open_newsletter to a higher version than 2.5,and avoid the version (,2.5]