CVE:CVE-2006-0136
CNNVD:CNNVD-200601-075
Phanatic Softwares Chimera Web Portal System 0.2的modules.php中的guestbook模块内的多个跨站脚本攻击(XSS)漏洞，远程攻击者可以通过(1) comment_poster、(2) comment_poster_email、(3) comment_poster_homepage和(4) comment_text参数注入任意Web脚本或HTML。
solution:Upgrade phanatic_softwares chimera_web_portal to a higher version than 0.2,and avoid the version 0.2