CVE:CVE-2009-4548
CNNVD:CNNVD-201001-010
ViArt Helpdesk 3.x版本中存在多个跨站脚本漏洞，远程攻击者可以借助(1)products.php,(2)article.php, (3)product_details.php,或(4) reviews.php的category_id参数;(5)forum.php的forum_id参数;或(6)products_search.php的search_category_id参数，执行任意web脚本或HTML。
solution:Upgrade viart viart_helpdesk to a higher version than 3.3.2,3.4.7,and avoid the version 3.3.2,3.4.7