CVE:CVE-2007-3839
CNNVD:CNNVD-200707-327
TBDev.NET DR 010306版本及其早期版本的takeprofedit.php中存在跨站脚本攻击漏洞。远程攻击者可以借助一个javascript: avatar参数中的URI，注入任意web脚本或HTML。
solution:Upgrade tbdev.net dr to a higher version than 11-10-05-beta-sf1_1,16-12-05-beta-1_161,010306,and avoid the version 11-10-05-beta-sf1_1,16-12-05-beta-1_161,010306