CVE:CVE-2006-0927
CNNVD:CNNVD-200602-408
Woltlab Burning Board (wBB) 2.x的JGS-XA JGS-Gallery Addon 4.0.0及之前版本中存在多个跨站脚本攻击(XSS)漏洞。远程攻击者可以借助(a) jgs_galerie_slideshow.php和(b) jgs_galerie_scroll.php中的(1) userid参数以及(c) jgs_galerie_slideshow.php中的(2) katid参数注入任意Web脚本或HTML。
solution:Upgrade jgs-xa jgs-gallery_addon to a higher version than 4.0,and avoid the version 4.0; Upgrade woltlab burning_board to a higher version than 2.0,2.0.3,2.1.5,2.2.1,2.2.2,2.2.3,2.3.0,2.3.1,and avoid the version 2.0,2.0.3,2.1.5,2.2.1,2.2.2,2.2.3,2.3.0,2.3.1