CVE:CVE-2006-4794
CNNVD:CNNVD-200609-244
e107 0.7.5中存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可以通过(1) contact.php, (2)download.php, (3)admin.php, (4)fpw.php, (5) news.php, (6)search.php, (7)signup.php, (8)submitnews.php和(9) user.php中的查询字符串(PATH_INFO) 注入任意Web脚本或HTML。
solution:Upgrade e107 e107 to a higher version than 0.7.5,and avoid the version 0.7.5