CVE:CVE-2006-6929
CNNVD:CNNVD-200701-162
Rapid Classified 3.1版本中存在多个跨站攻击漏洞。远程攻击者可以借助提交到(a)reply.asp或(b)view_print.asp的(1)id参数，到(c)search.asp的(2)SH1参数，到reply.asp的(3)名字参数或到(d)advsearch.asp的(4)dosearch参数，注入任意的web脚本或HTML。
solution:Upgrade ga_soft rapid_classified to a higher version than 3.1,and avoid the version 3.1