CVE:CVE-2008-6715
CNNVD:CNNVD-200904-249
Pre ADS Portal 2.0及之前版本存在多个跨站脚本攻击漏洞。远程攻击者可以借助对(1)homeadmin/adminhome.php和(2)homeadmin/signinform.php的msg参数，注入任意的web脚本或HTML。
solution:Upgrade preprojects pre_ads_portal to a higher version than 2.0,and avoid the version (,2.0]