CVE:CVE-2006-5504
CNNVD:CNNVD-200610-407
Simple Machines Forum (SMF)的index.php中存在跨站脚本攻击漏洞。远程攻击者可以借助action参数中基于64位编码的params值注入任意web脚本或HTML。
solution:Upgrade simple_machines simple_machines_forum to a higher version than 1.0.5,1.0.6,1.0.7,1.1_rc1,1.1_rc2,1.1_rc3,and avoid the version 1.0.5,1.0.6,1.0.7,1.1_rc1,1.1_rc2,1.1_rc3