CVE:CVE-2007-0552
CNNVD:CNNVD-200701-476
Oh no! Not another CMS (Onnac) 0.0.8.4及之前版本的install/default/error404.html中存在跨站脚本攻击漏洞。远程攻击者可以借助error_url参数，注入任意的web脚本或HTML。
solution:Upgrade oh_no_not_another_cms oh_no_not_another_cms to a higher version than 0.0.8.4,and avoid the version 0.0.8.4