CVE:CVE-2006-2882
CNNVD:CNNVD-200606-169
ASPScriptz Guest Book 2.0及更早版本中的submit.asp存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可通过(1)GBOOK_UNAME，(2)GBOOK_EMAIL，(3)GBOOK_CITY，(4)GBOOK_COU，(5)GBOOK_WWW和(6)GBOOK_MESS表单字段来注入任意webJ脚本或HTML。
solution:Upgrade aspscriptz aspscriptz_guest_book to a higher version than 2.0,and avoid the version (,2.0]