CVE:CVE-2007-2071
CNNVD:CNNVD-200704-316
Open-gorotto存在多个跨站脚本攻击漏洞。远程攻击者可以借助提交到(1)pub/modules/d/_top.html，(2)/pub/modules/a/_access.html，(3)_circletop.html，(4)_cir66.html in pub/modules/ci/，(5)_fri66.html,(6) _inv66.html,(7)_top.html,(8)_friends.html或(9)_fri33.html的未明向量，注入任意的web脚本或HTML。
solution:Upgrade open-gorotto open-gorotto to a higher version than 2.0_a,and avoid the version 2.0_a