CVE:CVE-2008-6894
CNNVD:CNNVD-200908-032
3CX Phone System 6.1793和6.0.806.0免费版中的login.php中的多个跨站脚本攻击漏洞，允许远程攻击者借助(1)fName参数；(2)fPassword参数，注入任意的Web脚本或HTML。
solution:Upgrade 3cx phone_system to a higher version than 6.0.806.0,6.1793,and avoid the version 6.0.806.0,6.1793