CVE:CVE-2005-4574
CNNVD:CNNVD-200512-620
PaperThin CommonSpot Content Server 4.5及更早版本中的loader.cfm存在跨站脚本攻击漏洞，远程攻击者可以通过bNewWindow参数来注入任意Web脚本或HTML。
solution:Upgrade paperthin commonspot_content_server to a higher version than 4.5,2.5,3.0,3.2,4.0,and avoid the version (,4.5],2.5,3.0,3.2,4.0