CVE:CVE-2009-1790
CNNVD:CNNVD-200905-366
CGI RESCUE Trees之前的版本2.11版本中存在跨站脚本攻击漏洞。远程攻击者可以借助未明参数，注入任意web脚本或HTML。
solution:Upgrade cgi_rescue rescue to a higher version than *:2.10,and avoid the version *:2.10