CVE:CVE-2008-0687
CNNVD:CNNVD-200802-188
Youtube Clone Script中的siteadmin/editor_files/includes/load_message.php存在跨站脚本攻击漏洞。远程攻击者借助lang[please_wait]参数注入任意的WEB脚本或HTML。
solution:Upgrade youtube clone_script to a higher version than *