CVE:CVE-2006-1293
CNNVD:CNNVD-200603-314
Contrexx CMS 1.0.8及其早期版本的index.php中存在跨站脚本攻击 (XSS) 漏洞，远程攻击者可以通过查询字符串(PHP_SELF)来注入任意Web脚本或HTML 。
solution:Upgrade astalavista_it_engineering contrexx to a higher version than 1.0.8,1.0.4,1.0.5,1.0.7,and avoid the version (,1.0.8],1.0.4,1.0.5,1.0.7