CVE:CVE-2006-5071
CNNVD:CNNVD-200609-464
eyeOS 0.9.1之前版本中存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可以通过与(1)eyeNav和(2)system/baixar.php有关的未明向量注入任意Web脚本或HTML。
solution:Upgrade eyeos_project eyeos to a higher version than 0.9.0.6,0.8.3,0.8.3_r2,0.8.4,0.8.4_r1,0.8.5,0.8.9,0.8.10,0.9.0.1,0.9.0.2,0.9.0.3,0.9.0.4,0.9.0.5,and avoid the version (,0.9.0.6],0.8.3,0.8.3_r2,0.8.4,0.8.4_r1,0.8.5,0.8.9,0.8.10,0.9.0.1,0.9.0.2,0.9.0.3,0.9.0.4,0.9.0.5