CVE:CVE-2005-0485
CNNVD:CNNVD-200503-154
PHP Arena的paNews 2.0b4 comment.php中存在跨站脚本攻击(XSS)漏洞，远程攻击者可以通过showpost参数注入任意HTML或Web脚本。
solution:Upgrade phparena panews to a higher version than 2.0b4,and avoid the version 2.0b4