CVE:CVE-2006-5080
CNNVD:CNNVD-200609-530
Six Apart Movable Type 3.3至3.32，以及Movable Type Enterprise 1.01和1.02的search函数中存在跨站脚本攻击(XSS)漏洞，远程攻击者可以通过未指定的矢量注入任意Web脚本或HTML。
solution:Upgrade six_apart movable_type to a higher version than 3.3,3.32,enterprise_1.01,enterprise_1.02,and avoid the version 3.3,3.32,enterprise_1.01,enterprise_1.02