CVE:CVE-2008-2236
CNNVD:CNNVD-200810-022
Blosxom的blosxom.cgi中存在跨站脚本攻击漏洞，远程攻击者可以通过flav参数(flavour变量)来执行任意web脚本或HTML。
solution:Upgrade blosxom blosxom to a higher version than 2.1.1,0.1.5,1.0,1.0.1,2.0,2.0-3,2.0-4,2.0.1,2.0.2,2.0.5,2.0.6,2.0.7,2.0.8,2.0.9,2.1.0,and avoid the version (,2.1.1],0.1.5,1.0,1.0.1,2.0,2.0-3,2.0-4,2.0.1,2.0.2,2.0.5,2.0.6,2.0.7,2.0.8,2.0.9,2.1.0