CVE:CVE-2011-3339
CNNVD:CNNVD-201112-171
SafeNet Sentinel HASP和7T IGSS中存在HTML注入漏洞，该漏洞源于对用户提供的输入未经正确过滤。攻击者提供的HTML和脚本代码可以在受影响站点的上下文中执行，可能允许攻击者盗取基于cookie的认证证书或者控制网站传达给用户的方式，也可能执行其他的攻击。Sentinel HASP SDK 5.11之前的版本和Sentinel HASP Run-time 6.x7 Technologies (7T) IGSS 7之前的版本中存在该漏洞。
solution:Upgrade 7t igss to a higher version than 7,and avoid the version 7; Upgrade safenet-inc sentinel_hasp_run-time to a higher version than 5.95,and avoid the version (,5.95]; Upgrade safenet-inc sentinel_hasp_sdk to a higher version than 5.10,and avoid the version (,5.10]