CVE:CVE-2005-1695
CNNVD:CNNVD-200505-1158
PostNuke 0.750和0.760RC2和RC3版本中的RSS模块存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可以通过 (1)传给magpie_slashbox.php的rss_url参数或者传给(2)magpie_simple.php或(3)magpie_debug.php的url参数，注入任意Web脚本或HTML。
solution:Upgrade postnuke_software_foundation postnuke to a higher version than 0.750,0.760_rc2,0.760_rc3,and avoid the version 0.750,0.760_rc2,0.760_rc3