CVE:CVE-2006-3521
CNNVD:CNNVD-200607-152
SiteForge Collaborative Development Platform 1.0.4及之前版本中的index/siteforge-bugs-action/proj.siteforge 存在跨站脚本攻击(XSS) 漏洞。远程攻击者可以借助(1) _status, (2) _extra1, (3) _extra2,或(4) _extra3参数，注入任意Web脚本或HTML 。
solution:Upgrade simian_systems_inc siteforge_collaborative_development_platform to a higher version than 1.0.4,and avoid the version (,1.0.4]