CVE:CVE-2005-4305
CNNVD:CNNVD-200512-320
Edgewall Trac 0.9、0.9.1和0.9.2中存在跨站脚本攻击漏洞，远程攻击者可以通过返回错误页面之前未正确净化的URL注入任意Web脚本或HTML。
solution:Upgrade edgewall_software trac to a higher version than 0.9,0.9.1,0.9.2,and avoid the version 0.9,0.9.1,0.9.2