CVE:CVE-2009-4406
CNNVD:CNNVD-200912-337
American Power Conversion (APC) Switched Rack PDU AP7932 B2,AOS中运行的rpdu中的Forms/login1存在跨站脚本漏洞,远程攻击者可以通过login_username参数注入任意web脚本或HTML。
solution:Upgrade apc ap7932_b2_firmware to a higher version than 3.3.3,3.7.0,and avoid the version 3.3.3,3.7.0; Upgrade apc ap7932_b2 to a higher version than *