CVE:CVE-2008-7213
CNNVD:CNNVD-200909-228
MOStlyCE 2.4版本之前的版本的mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php中存在跨站脚本攻击漏洞,当在Mambo 4.6.3及其早期版本中运行时,远程攻击者可以借助指令参数，注入任意网络脚本或HTML。
solution:Upgrade mambo-foundation mambo to a higher version than 4.6.3,4.6.2,and avoid the version (,4.6.3],4.6.2; Upgrade brilaps mostlyce to a higher version than 2.0,and avoid the version (,2.0]