CVE:CVE-2006-3035
CNNVD:CNNVD-200606-299
MyScrapbook 3.1及之前版本的addwords.php中存在多个跨站脚本攻击(XSS)漏洞。远程攻击者可以借助(1)name和(2)comment参数注入任意Web脚本或HTML。
solution:Upgrade myscrapbook myscrapbook to a higher version than 3.1,and avoid the version 3.1