CVE:CVE-2006-0461
CNNVD:CNNVD-200601-356
ExpressionEngine 1.4.1的core.input.php中存在跨站脚本攻击(XSS)漏洞，远程攻击者可以通过HTTP_REFERER(引用站点)注入任意Web脚本或HTML。
solution:Upgrade pmachine expressionengine to a higher version than 1.4.1,and avoid the version 1.4.1