CVE:CVE-2007-4048
CNNVD:CNNVD-200707-522
phpSysInfo 2.5.4-dev版本及其早期版本的index.php中存在跨站脚本攻击漏洞。远程攻击者可以借助PATH_INFO，注入任意web脚本或HTML。
solution:Upgrade phpsysinfo phpsysinfo to a higher version than 2.5.4-dev,and avoid the version (,2.5.4-dev]