CVE:CVE-2009-3599
CNNVD:CNNVD-200910-162
HUBScript 1.0版本的single_winner1.php中存在跨站脚本攻击漏洞。远程攻击者可以借助bid_id参数，注入任意的web脚本或HTML。
solution:Upgrade freewebscriptz hubscript to a higher version than 1.0,and avoid the version 1.0