CVE:CVE-2008-0552
CNNVD:CNNVD-200802-019
eTicket 1.5.6-RC4的index.php中的跨站脚本攻击漏洞会允许远程攻击者通过PATH_INFO来注入任意web脚本或HTML。
solution:Upgrade eticket eticket to a higher version than 1.5.6_rc4,and avoid the version 1.5.6_rc4