CVE:CVE-2008-1649
CNNVD:CNNVD-200804-045
EasyNews 4.0版本中的staticpages/easypublish/index.php存在跨站脚本攻击漏洞。远程攻击者借助edp_pupublish操作中的read参数，注入任意web脚本或HTML。
solution:Upgrade myiosoft easynews to a higher version than 4.0tr,and avoid the version 4.0tr