CVE:CVE-2005-4393
CNNVD:CNNVD-200512-466
e-publish CMS 2.0及更早版本中的show.cfm存在跨站脚本攻击漏洞，远程攻击者可以通过(1)obcatid和(2)comid参数注入任意Web脚本或HTML。
solution:Upgrade e-publish e-publish to a higher version than 2.0,and avoid the version (,2.0]