CVE:CVE-2007-1248
CNNVD:CNNVD-200703-120
built2go News Manager Blog 1.0版本中存在多个跨站脚本攻击漏洞。远程攻击者可以借助提交到(a)news.php的(1)cid,(2)uid和(3)nid参数和到(b)rating.php的nid参数，注入任意的web脚本或HTML。
solution:Upgrade built2go news_manager_blog to a higher version than 1.0,and avoid the version 1.0