CVE:CVE-2005-2563
CNNVD:CNNVD-200508-136
Gravity Board X (GBX) 1.1中存在多个跨站脚本(XSS)漏洞。这使得远程攻击者可以借助于(1)传递到deletethread.php的board_id参数或(2)模板注入任意Web脚本或HTML。
solution:Upgrade gravity_board_x_development_team gravity_board_x to a higher version than 1.1,and avoid the version 1.1