CVE:CVE-2005-4277
CNNVD:CNNVD-200512-349
toendaCMS 0.7 Beta之前版本的的index.php中存在跨站脚本攻击漏洞，远程攻击者可以通过id参数注入任意Web脚本或HTML。
solution:Upgrade toenda_software_development toendacms to a higher version than 0.6,0.6_beta_1,0.6_beta_2,0.6_beta_3,0.6_pre-beta,and avoid the version (,0.6],0.6_beta_1,0.6_beta_2,0.6_beta_3,0.6_pre-beta