CVE:CVE-2005-0656
CNNVD:CNNVD-200505-434
auraCMS 1.5中存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可以通过(1)hits.php的hits参数，(2)index.php的query参数或(3)counter.php的Count参数来注入任意Web脚本或HTML。
solution:Upgrade arif_supriyanto auracms to a higher version than 1.5,and avoid the version 1.5