CVE:CVE-2005-4381
CNNVD:CNNVD-200512-398
Caravel CMS 3.0 Beta 1及更早版本中存在多个跨站脚本攻击漏洞，远程攻击者可以通过(1) fileDN和(2) folderviewer_attrs参数注入任意Web脚本或HTML。
solution:Upgrade caravel_cms caravel_cms to a higher version than 3.0_beta_1,and avoid the version (,3.0_beta_1]