CVE:CVE-2011-4265
CNNVD:CNNVD-201112-119
phpWebSite是一款WEB站点内容管理系统。
phpWebSite 1.0.0之前版本中存在跨站脚本漏洞。远程攻击者可借助未明向量注入任意web脚本或者HTML。
solution:Upgrade phpwebsite phpwebsite to a higher version than 0.9.3.4,0.7.3,0.8.2,0.8.3,0.9.0,0.9.1,0.9.2,0.9.2.1,0.9.3,0.9.3.1,0.9.3.2,0.9.3.3,0.10,0.10.0,0.10.1,0.10.2,and avoid the version (,0.9.3.4],0.7.3,0.8.2,0.8.3,0.9.0,0.9.1,0.9.2,0.9.2.1,0.9.3,0.9.3.1,0.9.3.2,0.9.3.3,0.10,0.10.0,0.10.1,0.10.2