CVE:CVE-2008-1985
CNNVD:CNNVD-200804-399
DigitalHive 2.0 RC2的base.php存在跨站脚本攻击漏洞。远程会允许远程攻击者通过可能与membres.php相关的mt参数来注入任意web脚本或HTML。
solution:Upgrade digital_hive digitalhive to a higher version than 2.0:rc2,and avoid the version 2.0:rc2