CVE:CVE-2012-1208
CNNVD:CNNVD-201202-474
Fork CMS中的backend/core/engine/base.php中存在多个跨站脚本漏洞。远程攻击者可利用这些漏洞借助(1)blog/settings的report参数或者(2)users/index的error参数注入任意web脚本或者HTML。Fork CMS 3.2.4版本中存在这些漏洞，3.2.5之前的其他版本中也可能存在。
solution:Upgrade fork-cms fork_cms to a higher version than 3.2.4,and avoid the version 3.2.4
solution:Upgrade oracle mysql to a higher version than 5.1.66,5.5.28,and avoid the version [5.1.0,5.1.66],[5.5.0,5.5.28]; Upgrade mariadb mariadb to a higher version than 5.1.67,5.2.14,5.3.12,5.5.29,10.0.0,and avoid the version [5.1.0,5.1.67),[5.2.0,5.2.14),[5.3.0,5.3.12),[5.5.0,5.5.29),10.0.0; Upgrade canonical ubuntu_linux to a higher version than 10.04,11.10,12.04,12.10,and avoid the version 10.04,11.10,12.04,12.10; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_eus to a higher version than 6.3,and avoid the version 6.3; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0