CVE:CVE-2009-4684
CNNVD:CNNVD-201003-129
Ezodiak的脚本index.php存在跨站脚本攻击漏洞。远程攻击者可以借助sign参数，注入任意的web脚本和HTML。
solution:Upgrade edgephp ezodiak to a higher version than *
solution:Upgrade joric bmxplay to a higher version than 0.4.4b,and avoid the version 0.4.4b