CVE:CVE-2005-1492
CNNVD:CNNVD-200505-963
Gossamer Threads Links SQL 2.x和3.0中的user.cgi存在跨站脚本攻击(XSS)漏洞，远程攻击者可以通过url参数来注入任意Web脚本或HTML。
solution:Upgrade gossamer_threads gossamer_threads_links to a higher version than 2.0,2.2.0,and avoid the version 2.0,2.2.0; Upgrade gossamer_threads gossamer_threads_links-sql to a higher version than 3.0,and avoid the version 3.0