CVE:CVE-2009-4782
CNNVD:CNNVD-201004-354
Theeta CMS中存在多个跨站脚本攻击漏洞。远程攻击者可以借助多个参数注入任意的web脚本和HTML。这些参数包含：community/thread.php脚本的参数(1) start、 (2) forum；脚本community/thread.php的参数(3) cat ；脚本community/forum.php的参数4) start 和 (5) cat ；脚本blog/index.php的start参数。
solution:Upgrade mntechsolutions theeta_cms to a higher version than 0.0,0.01,and avoid the version 0.0,0.01