CVE:CVE-2005-1782
CNNVD:CNNVD-200505-1210
BookReview beta 1.0存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可以通过传给(1)add_review.htm，(2)suggest_review.htm，(3)suggest_category.htm，(4)add_booklist.htm或(5)add_url.htm的结点参数，传给(6)add_review.htm，(7)add_contents.htm，(8)add_classification.htm的isbn参数，传给index.php(又称add_contents.htm)内的add_contents页的(9)chapters参数，传给contact.htm的(10)user参数，或者传给search.htm的(11)submit[string]参数，注入任意Web脚本或HTML。
solution:Upgrade w.m.r._simpson bookreview to a higher version than 1.0,and avoid the version 1.0