CVE:CVE-2009-2149
CNNVD:CNNVD-200906-345
Campus Virtual-LMS中存在多个跨站脚本攻击漏洞。远程攻击者可以借助(1)对enrolments/step1.php的courseid参数或(2)搜索或(3)对files/shared_list.php的siteid参数，注入任意web脚本或HTML。
solution:Upgrade campusvirtualcomputrade campus_virtual-lms to a higher version than *