CVE:CVE-2009-2343
CNNVD:CNNVD-200907-095
Zoph 0.7.0.6之前的版本下的people.php存在跨站脚本漏洞，远程攻击者可以借助未明向量注入任意的Web脚本或HTML。
solution:Upgrade zoph zoph to a higher version than 0.7.0.5,0.3.3,0.4,0.5,0.5.1,0.6,0.7,0.7.0.1,0.7.0.2,0.7.0.3,0.7.0.4,and avoid the version (,0.7.0.5],0.3.3,0.4,0.5,0.5.1,0.6,0.7,0.7.0.1,0.7.0.2,0.7.0.3,0.7.0.4