CVE:CVE-2010-0997
CNNVD:CNNVD-201004-331
e107是使用MySQL后端数据库的基于PHP的内容管理系统，ePing和eTrace都是其中的工具插件。
e107 'Content Management'插件'107_plugins/content/content_manager.php'脚本存在跨站脚本攻击漏洞，当启动个人内容管理器时，用户辅助的远程认证用户可通过content_heading参数注入任意web脚本或HTML。
solution:Upgrade e107 e107 to a higher version than 0.7.19,0.7.0,0.7.1,0.7.2,0.7.3,0.7.4,0.7.5,0.7.6,0.7.7,0.7.8,0.7.9,0.7.10,0.7.11,0.7.12,0.7.13,0.7.14,0.7.15,0.7.16,0.7.17,0.7.18,and avoid the version (,0.7.19],0.7.0,0.7.1,0.7.2,0.7.3,0.7.4,0.7.5,0.7.6,0.7.7,0.7.8,0.7.9,0.7.10,0.7.11,0.7.12,0.7.13,0.7.14,0.7.15,0.7.16,0.7.17,0.7.18