CVE:CVE-2009-3654
CNNVD:CNNVD-200910-176
Drupal Boost 6.x-1.03版本之前的版本中存在未明漏洞。远程攻击者可以借助未知攻击向量，创建新的网根目录。
solution:Upgrade 316solutions boost to a higher version than 6.x-1.01,6.x-1.0,6.x-1.0:rc5,6.x-1.0-alpha1,6.x-1.0-alpha2,6.x-1.0-alpha3,6.x-1.0-alpha4,6.x-1.0-beta1,6.x-1.0-beta2,6.x-1.0-rc1,6.x-1.0-rc2,6.x-1.0-rc3,6.x-1.0-rc4,6.x-1.0-rc5,6.x-1.x-dev,and avoid the version (,6.x-1.01],6.x-1.0,6.x-1.0:rc5,6.x-1.0-alpha1,6.x-1.0-alpha2,6.x-1.0-alpha3,6.x-1.0-alpha4,6.x-1.0-beta1,6.x-1.0-beta2,6.x-1.0-rc1,6.x-1.0-rc2,6.x-1.0-rc3,6.x-1.0-rc4,6.x-1.0-rc5,6.x-1.x-dev