CVE:CVE-2009-4348
CNNVD:CNNVD-200912-248
Harold Bakker's NewsScript (HB-NS)中的index.php存在跨站脚本漏洞，远程攻击者可以借助topic操作的topic参数注入任意web脚本或HTML。该向量不同于CVE-2006-2146。
solution:Upgrade haroldbakker hb-ns to a higher version than 1.3,and avoid the version 1.3