CVE:CVE-2009-4038
CNNVD:CNNVD-200911-218
NCH Software Axon Virtual PBX 2.10和2.11版本中存在多个跨站脚本攻击漏洞。远程攻击者可以借助提交到登录程序的(1)onok或(2)oncancel参数，注入任意的web脚本或HTML。
solution:Upgrade nch axon_virtual_pbx to a higher version than 2.10,2.11,and avoid the version 2.10,2.11