CVE:CVE-2005-0914
CNNVD:CNNVD-200503-139
CPG Dragonfly 9.0.2.0中存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可以通过(1) index.php的profile参数或(2) cat参数注入任意Web脚本或HTML。
solution:Upgrade cpg-nuke cpg_dragonfly_cms to a higher version than 9.0.2_.0,and avoid the version 9.0.2_.0