CVE:CVE-2009-4064
CNNVD:CNNVD-200911-255
Drupal Gallery Assist模块6.x-1.7版本之前的版本6.x中存在跨站脚本攻击漏洞。远程攻击者可以借助字节标题，注入任意web脚本或HTML。
solution:Upgrade puntolatinoclub gallery_assist_module to a higher version than 6.x-1.6,6.x-1.5,6.x-1.6-beta1,6.x-1.6-dev,and avoid the version (,6.x-1.6],6.x-1.5,6.x-1.6-beta1,6.x-1.6-dev