CVE:CVE-2006-3052
CNNVD:CNNVD-200606-327
Event Registration 中存在跨站脚本攻击(XSS)漏洞，远程攻击者可通过(1) view-event-details.php中的event_id参数或(2)event-registration.php中的select_events参数，注入任意Web脚本或HTML。
solution:Upgrade cescripts event_registration_2checkout to a higher version than *; Upgrade cescripts event_registration_corporate to a higher version than *; Upgrade cescripts event_registration_paypal to a higher version than *; Upgrade cescripts event_registration_rsvp to a higher version than 1.0,and avoid the version 1.0