CVE:CVE-2008-0201
CNNVD:CNNVD-200801-136
ExpressionEngine 1.2.1以及更早版本下的index.php中的跨站脚本漏洞允许远程攻击者借助URL参数注入任意的Web脚本或HTML。
solution:Upgrade expressionengine expressionengine to a higher version than 1.2.1,and avoid the version (,1.2.1]