CVE:CVE-2005-4642
CNNVD:CNNVD-200512-916
HydroBB 1.0.0 Beta 2中存在多个跨站脚本攻击漏洞，远程攻击者可以通过传到(1)search.php，(2)members.php，(3)stats.php，(4)viewforum.php，(5)register.php，(6)usercp.php，(7)groups.php，(8)pms.php和(9)calendar.php的s参数注入任意Web脚本或HTML。
solution:Upgrade hydrobb hydrobb to a higher version than 1.0.0_beta_2,and avoid the version 1.0.0_beta_2