CVE:CVE-2011-5205
CNNVD:CNNVD-201210-031
RapidLeech是现在网盘中转下载经常用到的一个脚本程序。
Rapidleech 2.3 rev42 SVN r358、rev43 SVN r397和较早版本中的audl.php中存在跨站脚本(XSS)漏洞。远程攻击者可利用该漏洞通过links参数，注入任意web脚本或HTML。
solution:Upgrade rapidleech rapidleech to a higher version than *:rev43_svn_r397,2.3:rev42_svn_r358,2.3:v42_svn322,rev36,and avoid the version *:rev43_svn_r397,2.3:rev42_svn_r358,2.3:v42_svn322,rev36