CVE:CVE-2007-3131
CNNVD:CNNVD-200706-134
Light Blog的add_comment.php中存在跨站脚本攻击漏洞。远程攻击者可以借助id参数，注入任意的web脚本或HTML。
solution:Upgrade public_warehouse light_blog to a higher version than 4.1,and avoid the version 4.1