CVE:CVE-2008-4742
CNNVD:CNNVD-200810-452
TimeTrex中的interface/Login.php存在多个跨站脚本攻击漏洞，远程攻击者可以借助password 和user_name名参数注入任意的web脚本或HTML。
solution:Upgrade timetrex timetrex to a higher version than 2.2.11,and avoid the version 2.2.11