CVE:CVE-2009-2172
CNNVD:CNNVD-200906-371
vBulletin Radio和TV Player addon的forum/radioandtv.php中存在跨站脚本攻击漏洞。远处登记用户可以借助station参数，注入任意web脚本或HTML。
solution:Upgrade dream radio_and_tv_player_addon_for_vbulletin to a higher version than *