CVE:CVE-2006-0463
CNNVD:CNNVD-200601-354
IdeoContent Manager中存在跨站脚本攻击(XSS)漏洞，远程攻击者可以通过(1) index.php的goto_id参数或(2) news_full.php的page参数注入任意Web脚本或HTML。
solution:Upgrade ideosoft_design ideocontent_manager to a higher version than *