CVE:CVE-2009-4868
CNNVD:CNNVD-201005-141
Hitron Soft Answer Me存在跨站脚本攻击(XSS)漏洞，远程攻击者可以通过answers脚本(即answers.php)的q_id参数注入任意web脚本或HTML。
solution:Upgrade hitronsoft answer_me to a higher version than 1.0,and avoid the version 1.0