CVE:CVE-2007-6142
CNNVD:CNNVD-200711-378
ph03y3nk just another flat file (JAF) CMS中存在多个跨站脚本攻击漏洞，远程攻击者借助(1)index.php中的show参数以及(2)print.php的print参数注入任意web脚本或HTML。
solution:Upgrade salims_softhouse jaf_cms to a higher version than 4.0_rc2,and avoid the version 4.0_rc2