CVE:CVE-2007-1965
CNNVD:CNNVD-200704-210
eXV2 CMS存在多个跨站脚本攻击漏洞。远程攻击者可以借助提交到(1)archive.php,(2)article.php,(3)index.php或(4)topics.php的set_lang参数，注入任意的web脚本或HTML。
solution:Upgrade exv2 content_management_system to a higher version than 2.0.4.3,and avoid the version (,2.0.4.3]