CVE:CVE-2009-4852
CNNVD:CNNVD-201005-095
SemanticScuttle是一个社会化书签工具。
SemanticScuttle存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可以通过index.php的sort参数，或其它未明向量注入任意web脚本或HTML。
solution:Upgrade festic semanticscuttle to a higher version than 0.94,0.85,0.86,0.87,0.88,0.89,0.90,0.91,0.92,0.93,and avoid the version (,0.94],0.85,0.86,0.87,0.88,0.89,0.90,0.91,0.92,0.93