CVE:CVE-2005-4072
CNNVD:CNNVD-200512-155
CFMagic Magic Forum Personal 2.5及更早版本中存在跨站脚本攻击漏洞，远程攻击者可以通过search_forums.cfm中的文字参数(用在"搜索："字段中)注入任意Web脚本或HTML。
solution:Upgrade cfmagic magic_forum_personal to a higher version than 2.5,and avoid the version (,2.5]