CVE:CVE-2002-2350
CNNVD:CNNVD-200212-354
Zorum 2.4的dbtreelistproperty_method.php中z_user_show.php存在跨站脚本攻击（XSS）漏洞。远程攻击者可以借助class参数注入任意web脚本。
solution:Upgrade phpoutsourcing zorum to a higher version than 2.4,and avoid the version 2.4