CVE:CVE-2008-4076
CNNVD:CNNVD-200809-189
Tor Board、Topics BBS、Simple BBS、Interactive BBS都是Tor World 公司的Web论坛系统。
Tor World Tor Board 1.3及之前版本、Topics BBS 1.11及之前版本、Simple BBS 1.86及之前版本以及Interactive BBS 1.57及之前版本中均存在跨站脚本攻击漏洞。远程攻击者可通过未知攻击方式注入任意web脚本或HTML。
solution:Upgrade tor_world interactive_bbs to a higher version than 1.57,and avoid the version (,1.57]; Upgrade tor_world simple_bbs to a higher version than 1.86,1.3,and avoid the version (,1.86],1.3; Upgrade tor_world topics_bbs to a higher version than 1.11,and avoid the version (,1.11]; Upgrade tor_world tor_board to a higher version than 1.3,1.1,and avoid the version (,1.3],1.1