CVE:CVE-2007-3249
CNNVD:CNNVD-200706-271
Joomla! Letterman Subscriber(mod_letterman)的mod_lettermansubscribe.php中存在跨站脚本攻击漏洞。远程攻击者可以借助Itemid参数，注入任意的web脚本或HTML。
solution:Upgrade joomla letterman_subscriber to a higher version than 1.2.3,and avoid the version (,1.2.3]