CVE:CVE-2008-4633
CNNVD:CNNVD-200810-332
Drupal Node Vote模块存在SQL注入漏洞。当"允许用户再次投票"被激活时，远程认证用户可以借助与"之前的cast投票"相关的未明向量，来执行任意的SQL指令。
solution:Upgrade drupal node_clone to a higher version than 4.7.x-1.0,4.7.x-1.1,4.7.x-1.2,4.7.x-1.3,4.7.x-2.1,5,6,and avoid the version 4.7.x-1.0,4.7.x-1.1,4.7.x-1.2,4.7.x-1.3,4.7.x-2.1,5,6