CVE:CVE-2010-1905
CNNVD:CNNVD-201005-162
Consona是全球领先的企业应用解决方案和服务供应商，为各种规模的企业提供信息化服务。
Dynamic Security Agent (DSA)是一个主机防护软件。它无需特征码，是桌面级的恶意软件防护程序。 
Consona Live Assistance、 Dynamic Agent和Subscriber Assistance存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可通过特制ASP网页输入注入任意web脚本或HTML。比如，利用sdccommon/verify/asp/n6plugindestructor.asp的backurl参数。
solution:Upgrade consona consona_live_assistance to a higher version than *; Upgrade consona consona_dynamic_agent to a higher version than -; Upgrade consona consona_subscriber_assistance to a higher version than *