CVE:CVE-2006-4442
CNNVD:CNNVD-200608-477
PHP iAddressBook 0.95之前的版本存在跨站脚本攻击(XSS)漏洞，远程攻击者可借助cat_name参数注入任意Web脚本或HTML，此漏洞与增加一个类别有关(categories字段)。注意：某些详细信息是从第三方信息来源获取的。
solution:Upgrade clemens_wacha php_iaddressbook to a higher version than 0.9,0.91,0.91a,0.92,0.93,0.94,and avoid the version 0.9,0.91,0.91a,0.92,0.93,0.94