CVE:CVE-2006-6459
CNNVD:CNNVD-200612-227
PhpBB Toplist 1.3.7中的toplist.php存在跨站脚本攻击(XSS)漏洞，远程攻击者可以通过在添加新站点(toplistnew操作)时的(1)名字和(2)信息字段来注入HTML或任意Web脚本。
solution:Upgrade phpbb toplist to a higher version than 1.3.7,and avoid the version 1.3.7