CVE:CVE-2011-1952
CNNVD:CNNVD-201106-030
Post Revolution 0.8.0c-2版本中的common.php中存在无限循环漏洞。远程攻击者可以借助畸形的HTML标记导致拒绝服务。
solution:Upgrade postrev post_revolution to a higher version than 0.8.0c,0.6.2:beta,0.6.3:beta,0.6.4,0.6.5,0.6.6,0.7.0:rc1,0.7.0:rc2,0.7.0:rc3,0.7.0:rc4,0.8.0:alpha,0.8.0b,and avoid the version (,0.8.0c],0.6.2:beta,0.6.3:beta,0.6.4,0.6.5,0.6.6,0.7.0:rc1,0.7.0:rc2,0.7.0:rc3,0.7.0:rc4,0.8.0:alpha,0.8.0b