CVE:CVE-2009-4547
CNNVD:CNNVD-201001-009
ViArt CMS 3.x版本中存在多个跨站脚本漏洞，远程攻击者可以借助(1)forums.php的category_id参数,或(2) forum.php或(3) forum_topic_new.php的forum_id参数，注入任意web脚本或HTML。
solution:Upgrade viart viart_cms to a higher version than 3.3.2,and avoid the version 3.3.2