CVE:CVE-2009-4930
CNNVD:CNNVD-201007-093
SunGard Banner Student System 7.4版本的twbkwbis.P_SecurityQuestion (又称 Change Security Question)页面中存在跨站脚本攻击漏洞。远程攻击者可以借助New Question域注入任意的web脚本或者HTML。
solution:Upgrade sungard banner_student to a higher version than 7.4,and avoid the version 7.4