CVE:CVE-2008-0917
CNNVD:CNNVD-200802-434
Tor World Tor Search、I-Navigator、Mobile Frontier、Diary.cgi (aka Quotes of the Day)、Tor News、Simple BBS、Interactive BBS、Tor Board、Simple Vote以及Com Vote 存在跨站脚本攻击漏洞。远程攻击者可以通过未明向量以注入任意web脚本或HTML。
solution:Upgrade tor_world com_vote to a higher version than 1.2,and avoid the version 1.2; Upgrade tor_world i-navigator to a higher version than 4.0,and avoid the version 4.0; Upgrade tor_world interactive_bbs to a higher version than 1.3,and avoid the version 1.3; Upgrade tor_world mobile_frontier to a higher version than 2.1,and avoid the version 2.1; Upgrade tor_world quotes_of_the_day to a higher version than 1.5,and avoid the version 1.5; Upgrade tor_world simple_bbs to a higher version than 1.3,and avoid the version 1.3; Upgrade tor_world simple_vote to a higher version than 1.1,and avoid the version 1.1; Upgrade tor_world tor_board to a higher version than 1.1,and avoid the version 1.1; Upgrade tor_world tor_news to a higher version than 1.21,and avoid the version 1.21; Upgrade tor_world tor_search to a higher version than 1.1,and avoid the version 1.1