CVE:CVE-2009-2780
CNNVD:CNNVD-200908-210
68 Classifieds 4.1版本存在多个跨站脚本攻击漏洞。远程攻击者可以借助到category.php的cat参数，到login.php和viewlisting.php的查看参数， 到searchresults.php和toplistings.php的页参数以及到viewmember.php的member参数，注入任意的web脚本或HTML。
solution:Upgrade 68_classifieds 68_classifieds to a higher version than 4.1,and avoid the version 4.1