CVE:CVE-2007-3694
CNNVD:CNNVD-200711-191
Miro Project Broadcast Machine 0.9.9.9中的login.php存在跨站脚本攻击漏洞，远程攻击者借助username参数注入任意web脚本或HTML。
solution:Upgrade getmiro broadcast_machine to a higher version than 0.9.9.9,and avoid the version 0.9.9.9