CVE:CVE-2009-2907
CNNVD:CNNVD-201003-330
SpringSource tc Server、 Application Management Suite (AMS)、Hyperic HQ Open Source、 Hyperic HQ存在多个跨站脚本攻击漏洞。远程攻击者可以利用description域和未明的 "input域"，注入任意的web脚本和HTML。
solution:Upgrade springsource application_management_suite to a higher version than *:sr3,and avoid the version *:sr3; Upgrade springsource hyperic_hq to a higher version than 4.0.0,4.1.0,*:beta_1,and avoid the version (,4.0.0],(,4.1.0],*:beta_1; Upgrade springsource tc_server to a higher version than *:b,and avoid the version *:b