CVE:CVE-2008-2839
CNNVD:CNNVD-200806-333
Traindepot 0.1的搜索模块中存在跨站脚本攻击漏洞，远程攻击者通过对index.php的查询函数来注入任意web脚本或HTML。
solution:Upgrade traindepot traindepot to a higher version than 0.1,and avoid the version 0.1