CVE:CVE-2006-2632
CNNVD:CNNVD-200605-509
Andrew Godwin ByteHoard 2.1及之前版本存在跨站脚本攻击(XSS)漏洞。远程认证用户可以借助文件描述，注入任意Web脚本或HTML。
solution:Upgrade andrew_godwin bytehoard to a higher version than 2.0.0,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0_beta1,2.0_beta2,2.1_alpha,2.1_beta,2.1_delta,2.1_gamma,and avoid the version 2.0.0,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0_beta1,2.0_beta2,2.1_alpha,2.1_beta,2.1_delta,2.1_gamma