CVE:CVE-2011-0455
CNNVD:CNNVD-201103-051
Things BBS 2.0.3之前版本和BBS Thread 2.0.3之前版本中存在跨站脚本攻击漏洞。远程攻击者可以借助未明向量注入任意web脚本或者HTML。
solution:Upgrade thingslabo things_bbs to a higher version than 2.0.2,1.0.4,1.1.0,2.0.0,2.0.1,and avoid the version (,2.0.2],1.0.4,1.1.0,2.0.0,2.0.1; Upgrade thingslabo bbs_thread to a higher version than 2.0.2,1.0.0,2.0.0,2.0.1,and avoid the version (,2.0.2],1.0.0,2.0.0,2.0.1