CVE:CVE-2007-2198
CNNVD:CNNVD-200704-428
LAN Management System (LMS)中存在跨站脚本攻击漏洞。远程攻击者可以借助未明向量，可能涉及提交到contrib/formularz_przelewu_wplaty/druk.php的OD参数，注入任意的web脚本或HTML。
solution:Upgrade lan_management_system lan_management_system to a higher version than 1.5.6,and avoid the version 1.5.6
solution:Upgrade rm rm_easymail_plus to a higher version than *