CVE:CVE-2005-0270
CNNVD:CNNVD-200505-004
ReviewPost PHP Pro 2.84 之前的版本存在多个跨站脚本(XSS)漏洞，远程攻击者可以通过showcat.php的(1)si参数，showproduct.php的(2)cat或(3)page参数或reportproduct.php的(4)report参数来注入Web脚本或HTML。
solution:Upgrade photopost reviewpost_php_pro to a higher version than 2.84,1.0.2,2.5,2.5.1,and avoid the version (,2.84],1.0.2,2.5,2.5.1