CVE:CVE-2007-2880
CNNVD:CNNVD-200705-511
Digirez 中存在多个跨站脚本攻击漏洞。远程攻击者可以借助提交到room/info_book.asp的(1)Room_name参数或到room/week.asp的(2)curYear参数，注入任意的web脚本或HTML。
solution:Upgrade digiappz digirez to a higher version than 3.4,and avoid the version 3.4