CVE:CVE-2009-4544
CNNVD:CNNVD-201001-006
Cromosoft Technologies Facil Helpdesk 2.3 Lite中的kbase/kbase.php存在跨站脚本漏洞，远程攻击者可以借助PATH_INFO注入任意web脚本或HTML
solution:Upgrade cromosoft facil_helpdesk to a higher version than 2.3,and avoid the version 2.3