CVE:CVE-2008-4481
CNNVD:CNNVD-200810-107
Redmine的跨站脚本攻击漏洞，远程攻击者可以通过未明向量来执行任意web脚本或HTML。
solution:Upgrade redmine redmine to a higher version than 0.7.2,0.1.0,0.2.1,0.2.2,0.3.0,0.4.0,0.4.1,0.4.2,0.5.0,0.5.1,0.6.0,0.6.1,0.6.2,0.6.3,0.6.4,0.7.0,0.7.0:rc1,0.7.1,and avoid the version (,0.7.2],0.1.0,0.2.1,0.2.2,0.3.0,0.4.0,0.4.1,0.4.2,0.5.0,0.5.1,0.6.0,0.6.1,0.6.2,0.6.3,0.6.4,0.7.0,0.7.0:rc1,0.7.1