CVE:CVE-2008-5164
CNNVD:CNNVD-200811-323
Rat CMS Pre-Alpha 2版本的多个跨站脚本攻击漏洞允许远程攻击者通过(1) 对(a) viewarticle.php 和 (b) viewarticle2.php的id参数以及(2) 对viewarticle.php的PATH_INFO来 to 注入任意web脚本或HTML。
solution:Upgrade theratstudios the_rat_cms to a higher version than 2:pre_alpha,and avoid the version 2:pre_alpha