CVE:CVE-2005-0870
CNNVD:CNNVD-200505-141
phpSysInfo 2.3中存在多个跨站脚本攻击(XSS)漏洞，当启用register_globals时，允许远程攻击者通过(1)index.php的sensor_program参数，(2)text[language]，(3)text[template]或(4)system_footer.php的hide_picklist参数来注入任意Web脚本或HTML。
solution:Upgrade phpsysinfo phpsysinfo to a higher version than 2.3,and avoid the version 2.3