CVE:CVE-2008-6746
CNNVD:CNNVD-200904-439
Turba Contact Manager H3 2.2.1之前版本中的contact display view存在跨站脚本攻击漏洞。远程攻击者可以借助联系名，注入任意的web脚本或HTML。
solution:Upgrade horde turba_h3 to a higher version than 2.2,0.0.1,0.0.2,0.0.3,1.0,1.0:rc4,1.1,1.2,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,2.0,2.0:alpha,2.0:beta,2.0:rc1,2.0:rc2,2.0:rc3,2.0.1,2.0.1:rc1,2.0.2,2.0.3,2.0.3:rc1,2.0.4,2.0.5,2.1,2.1:rc1,2.1.1,2.1.2,2.1.3,2.1.4,2.1.5,2.1.6,2.1.7,2.2:alpha,2.2:rc1,2.2:rc2,2.2:rc3,2.2:rc4,and avoid the version (,2.2],0.0.1,0.0.2,0.0.3,1.0,1.0:rc4,1.1,1.2,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,2.0,2.0:alpha,2.0:beta,2.0:rc1,2.0:rc2,2.0:rc3,2.0.1,2.0.1:rc1,2.0.2,2.0.3,2.0.3:rc1,2.0.4,2.0.5,2.1,2.1:rc1,2.1.1,2.1.2,2.1.3,2.1.4,2.1.5,2.1.6,2.1.7,2.2:alpha,2.2:rc1,2.2:rc2,2.2:rc3,2.2:rc4