CVE:CVE-2008-3847
CNNVD:CNNVD-200808-346
AN Guestbook是一套使用PHP/MySQL的Web留言板程序。
AN Guestbook (ANG) 0.7.6之前的版本存在多个跨站脚本攻击漏洞。远程攻击者可以利用此漏洞，注入任意的web脚本或HTML，实现跨站攻击。
solution:Upgrade aguestbook an_guestbook to a higher version than 0.7.5,0.1,0.2,0.3.1,0.3.2,0.3.3,0.3.4,0.3.5,0.4,0.4.1,0.4.5,0.5,0.6,0.7,0.7.1,and avoid the version (,0.7.5],0.1,0.2,0.3.1,0.3.2,0.3.3,0.3.4,0.3.5,0.4,0.4.1,0.4.5,0.5,0.6,0.7,0.7.1