CVE:CVE-2005-1803
CNNVD:CNNVD-200505-1229
Net Portal Dynamic System (NPDS) 5.0存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可以通过传给(1)admin.php或(2)powerpack_f.php的语言参数，(3)传给sdv_infos.php的sitename参数，(4)传给faq.php的categories参数，(5)传给glossaire模块的lettre参数，(6)传给reviews.php的title参数，或者(7)传给reply.php的image_subject参数，来注入任意Web脚本或HTML。
solution:Upgrade net_portal_dynamic_system net_portal_dynamic_system to a higher version than 5.0,and avoid the version 5.0