CVE:CVE-2005-4698
CNNVD:CNNVD-200512-956
TellMe 1.2及更早版本存在跨站脚本攻击漏洞，远程攻击者可以通过91)q_IP (IP)或(2)q_Host (HOST)参数注入任意Web脚本或HTML。
solution:Upgrade tellme tellme to a higher version than 1.2,and avoid the version 1.2