CVE:CVE-2006-0524
CNNVD:CNNVD-200602-038
Derek Ashauer ashNews 0.83的ashnews.php中存在跨站点脚本攻击(XSS)漏洞。远程攻击者可以借助id参数注入任意Web脚本或HTML。
solution:Upgrade ashwebstudio ashnews to a higher version than 0.83,and avoid the version 0.83