CVE:CVE-2007-3049
CNNVD:CNNVD-200706-046
Buttercup web file manager (BWFM) May 2007的index.php中存在跨站脚本攻击漏洞。远程攻击者可以借助标题参数，注入任意的web脚本或HTML。
solution:Upgrade buttercup_wfm buttercup_wfm to a higher version than may-2007,and avoid the version may-2007