CVE:CVE-2005-4455
CNNVD:CNNVD-200512-509
LiveJournal CVS在Dec 13 2005之前版本中的cleanhtml.pl 1.129使得远程攻击者可以通过如customview.cgi这样的向量通过XML中的XSL名字空间注入脚本语言。
solution:Upgrade livejournal livejournal to a higher version than *