CVE:CVE-2006-1415
CNNVD:CNNVD-200603-441
dotNetBB 2.42EC SP 3 及早期版本中存在iforget.aspx存在跨站脚本攻击漏洞，远程攻击者可通过em参数注入任意Web脚本或HTML。
solution:Upgrade dotnetbb dotnetbb_forums to a higher version than 2.42ec_sp_3,and avoid the version (,2.42ec_sp_3]