CVE:CVE-2010-2491
CNNVD:CNNVD-201009-256
Germy Roundup是一款免费有趣的小游戏，可以在PC，Mac和移动电脑上玩。
Roundup 1.4.14之前版本中的cgi/client.py文件中存在跨站脚本攻击漏洞。远程攻击者可以借助/issue程序中的模板参数注入任意web脚本或者HTML。
solution:Upgrade roundup-tracker roundup to a higher version than 1.4.13,0.1.0,0.1.1,0.1.2,0.1.3,0.2.0,0.2.1,0.2.2,0.2.3,0.2.4,0.2.5,0.2.6,0.2.7,0.2.8,0.3.0,0.3.0:pre1,0.3.0:pre2,0.3.0:pre3,0.4.0,0.4.0:b1,0.4.0:b2,0.4.1,0.4.2,0.4.2:pr1,0.5,0.5.0,0.5.0:beta1,0.5.0:beta2,0.5.0:pr1,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.5.6,0.5.7,0.5.8:stable,0.5.9,0.6.0,0.6.0:b1,0.6.0:b2,0.6.0:b3,0.6.0:b4,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.6.6,0.6.7,0.6.8,0.6.9,0.6.10,0.6.11,0.7.0,0.7.0:b1,0.7.0:b2,0.7.0:b3,0.7.1,0.7.2,0.7.3,0.7.4,0.7.5,0.7.6,0.7.7,0.7.8,0.7.9,0.7.10,0.7.11,0.7.12,0.8.0,0.8.0:b1,0.8.0:b2,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.8.6,0.9.0:b1,1.0,1.0.1,1.1.0,1.1.1,1.1.2,1.2.0,1.2.1,1.3.0,1.3.1,1.3.2,1.3.3,1.4.0,1.4.1,1.4.2,1.4.3,1.4.4,1.4.5,1.4.6,1.4.7,1.4.8,1.4.9,1.4.10,1.4.11,1.4.12,and avoid the version (,1.4.13],0.1.0,0.1.1,0.1.2,0.1.3,0.2.0,0.2.1,0.2.2,0.2.3,0.2.4,0.2.5,0.2.6,0.2.7,0.2.8,0.3.0,0.3.0:pre1,0.3.0:pre2,0.3.0:pre3,0.4.0,0.4.0:b1,0.4.0:b2,0.4.1,0.4.2,0.4.2:pr1,0.5,0.5.0,0.5.0:beta1,0.5.0:beta2,0.5.0:pr1,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.5.6,0.5.7,0.5.8:stable,0.5.9,0.6.0,0.6.0:b1,0.6.0:b2,0.6.0:b3,0.6.0:b4,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.6.6,0.6.7,0.6.8,0.6.9,0.6.10,0.6.11,0.7.0,0.7.0:b1,0.7.0:b2,0.7.0:b3,0.7.1,0.7.2,0.7.3,0.7.4,0.7.5,0.7.6,0.7.7,0.7.8,0.7.9,0.7.10,0.7.11,0.7.12,0.8.0,0.8.0:b1,0.8.0:b2,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.8.6,0.9.0:b1,1.0,1.0.1,1.1.0,1.1.1,1.1.2,1.2.0,1.2.1,1.3.0,1.3.1,1.3.2,1.3.3,1.4.0,1.4.1,1.4.2,1.4.3,1.4.4,1.4.5,1.4.6,1.4.7,1.4.8,1.4.9,1.4.10,1.4.11,1.4.12