http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200505-1045

SiteStudio1.6的guestbook存在跨站脚本攻击(XSS)漏洞，远程攻击者可以通过传给(1)StandaloneSiteStudio内的psoft.guestbook.GuestBookServ或(2)IntegratedSiteStudiowithH-Sphere内的E-Guest_sign.pl的名字字段，来注入任意Web脚本或HTML。

来源:XF
名称:sitestudio-guestbook-xss(20496)
链接:http://xforce.iss.net/xforce/xfdb/20496
来源:www.psoft.net
链接:http://www.psoft.net/SS/ss_16_security_update_guestbook.html
来源:www.psoft.net
链接:http://www.psoft.net/misc/hsphere_winbox_security_update_guestbook.html
来源:FULLDISC
名称:20050509SiteStudio
链接:http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-05/0154.html
来源:SECUNIA
名称:15286
链接:http://secunia.com/advisories/15286
来源:MISC
链接:http://exploitlabs.com/files/advisories/EXPL-A-2005-008-sitestudio.txt
来源:BID
名称:13554
链接:http://www.securityfocus.com/bid/13554
来源:OSVDB
名称:16240
链接:http://www.osvdb.org/16240