CVE:CVE-2009-2588
CNNVD:CNNVD-200907-358
Hotscripts Type PHP Clone Script中存在多个跨站脚本攻击漏洞。远程攻击者可以借助(1) feedback.php， (2) index.php， and (3) lostpassword.php中msg参数注入任意的WEB脚本和HTML。
solution:Upgrade resalecode hotscripts_type_php_clone_script to a higher version than -