CVE:CVE-2006-2799
CNNVD:CNNVD-200606-088
toendaCMS 0.7.0版本的content_footer.php中存在跨站脚本攻击(XSS)漏洞，远程攻击者可以通过print_url 变量注入任意Web脚本或HTML。
solution:Upgrade toenda_software_development toendacms to a higher version than 0.7,0.6,0.6.1,0.6.2.1,0.6_beta_1,0.6_beta_2,0.6_beta_3,0.6_pre-beta,and avoid the version (,0.7],0.6,0.6.1,0.6.2.1,0.6_beta_1,0.6_beta_2,0.6_beta_3,0.6_pre-beta