CVE:CVE-2006-2340
CNNVD:CNNVD-200605-188
PassMasterFlex和PassMasterFlexPlus (PassMasterFlex+) 1.2 及之前版本存在跨站脚本攻击(XSS) 漏洞。远程攻击者可以借助(1) username, (2) password或(3)Hack Log中的 User-Agent HTTP头，注入任意web脚本或HTML 。
solution:Upgrade lethal_penguin passmasterflex to a higher version than 1.2,and avoid the version 1.2; Upgrade lethal_penguin passmasterflexplus to a higher version than 1.2,and avoid the version 1.2