CVE:CVE-2009-4647
CNNVD:CNNVD-201002-192
Accellion Secure File Transfer Appliance 存在跨站脚本攻击漏洞。在管理员浏览审计日志时该参数没有得到正确处理username参数，远程攻击者可以通过username参数，注入任意web脚本或HTML。
solution:Upgrade accellion secure_file_transfer_appliance to a higher version than 7_0_135,7_0_178,7_0_189,7_0_259,and avoid the version 7_0_135,7_0_178,7_0_189,7_0_259