CVE:CVE-2006-6532
CNNVD:CNNVD-200612-267
Vt-Forum Lite 1.3及更早版本存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可以通过传给(a)vf_info.asp，(b)vf_newtopic.asp，(c)vf_settings.asp和(d)vf_replytopic.asp的(1)StrMsg或(2)Topic_ID参数来注入任意Web脚本或HTML。是不同于CVE-2006-6447的向量。
solution:Upgrade vt-forum vt-forum_lite to a higher version than 1.3,and avoid the version (,1.3]