CVE:CVE-2005-1605
CNNVD:CNNVD-200505-1045
SiteStudio 1.6的guestbook存在跨站脚本攻击(XSS)漏洞，远程攻击者可以通过传给(1)Standalone Site Studio内的psoft.guestbook.GuestBookServ或(2)Integrated Site Studio with H-Sphere内的E-Guest_sign.pl的名字字段，来注入任意Web脚本或HTML。
solution:Upgrade positive_software sitestudio to a higher version than 1.6_final,1.6_patch_1,and avoid the version 1.6_final,1.6_patch_1