CVE:CVE-2009-4580
CNNVD:CNNVD-201001-021
Hasta Blog 2.3中存在多个跨站脚本攻击漏洞。远程攻击者可以借助提交到(1)yorumyaz.php和(2)blog.php的id参数，执行任意的web脚本或HTML。
solution:Upgrade hastablog hasta_blog to a higher version than 2.3,and avoid the version 2.3