CVE:CVE-2007-2310
CNNVD:CNNVD-200704-538
BloofoxCMS的plugins/spaw/img_popup.php中存在跨站脚本攻击漏洞。远程攻击者可以借助img_url参数，注入任意的web脚本或HTML。
solution:Upgrade bloofoxcms bloofoxcms to a higher version than 0.2.2,and avoid the version 0.2.2