CVE:CVE-2012-4892
CNNVD:CNNVD-201209-210
FlatnuX CMS是一款内容管理系统。
FlatnuX CMS 2012-03.08和较早版本中存在多个跨站脚本(XSS)漏洞。远程攻击者可利用该漏洞通过新闻模块submitnews操作中的(1)title_en(2)summary_en或(3)body_en参数注入任意web脚本或HTML。
solution:Upgrade flatnux flatnux to a higher version than 2012-03.08,2008-12-11,2009-01-27,2009-02-04,2011-08-09-2,and avoid the version (,2012-03.08],2008-12-11,2009-01-27,2009-02-04,2011-08-09-2