CVE:CVE-2008-6891
CNNVD:CNNVD-200908-035
ASP Forum Script中的多个跨站脚本攻击漏洞，允许远程攻击者借助(1)到(a new_message.asp和(b)messages.asp的forum_id参数；(2)到default.asp的guery字符串，注入任意的Web脚本或HTML。
solution:Upgrade codetoad asp_forum_script to a higher version than *