CVE:CVE-2008-0497
CNNVD:CNNVD-200801-445
Nucleus CMS 3.31中的action.php中存在跨站脚本漏洞。远程攻击者可以借助PATH_INFO注入任意的WEB脚本或HTML。当运行PHP_SELF时，PATH_INFO未被引用。
solution:Upgrade nucleus_cms nucleus_cms to a higher version than 3.31,and avoid the version 3.31