CVE:CVE-2006-6372
CNNVD:CNNVD-200612-156
JAB Guest Book 20061205的pbguestbook.php中存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可以通过(1)topic或(2)message参数注入任意Web脚本或HTML。
solution:Upgrade james_barnsley jab_guest_book to a higher version than 2006-12-05,and avoid the version 2006-12-05