CVE:CVE-2005-3955
CNNVD:CNNVD-200512-023
(a) blogBuddiesv 0.3， (b) Jaws 0.6.2以及可能的其他产品中使用的MagpieRSS 7.1存在多个跨站脚本攻击漏洞。远程攻击者可以借助 (1) 对 (a) magpie_debug.php的url参数和(2) 对 (b) magpie_slashbox.php和(c) simple_smarty.php的rss_url 参数，执行任意的Web脚本或HTML 。
solution:Upgrade blogbuddies blogbuddies to a higher version than 0.3,and avoid the version 0.3; Upgrade jaws jaws to a higher version than 0.6.2,and avoid the version 0.6.2; Upgrade magpierss magpierss to a higher version than 7.1,and avoid the version 7.1