CVE:CVE-2009-3513
CNNVD:CNNVD-200910-104
Pilot Group (PG) eTraining中存在多个跨站脚本攻击漏洞。远程攻击者可以借助提交到courses_login.php的(1)cat_id参数，到(2)news_read.php或(3)lessons_login.php的id参数，或开始操作中到lessons_login.php的(4)cur参数，注入任意的web脚本或HTML。
solution:Upgrade pilotgroup pg_etraining to a higher version than *
solution:Upgrade symantec altiris_deployment_solution to a higher version than 6.9,6.9:sp1,6.9.164,6.9.176,6.9.355,6.9.355:sp1,and avoid the version 6.9,6.9:sp1,6.9.164,6.9.176,6.9.355,6.9.355:sp1