CVE:CVE-2007-2618
CNNVD:CNNVD-200705-222
Drake CMS 的index.php中存在CRLF注入漏洞。远程攻击者可以借助lang参数中的CRLF序列，注入任意的HTTP标头和执行HTTP响应分裂攻击。
solution:Upgrade drake_team drake_cms to a higher version than 0.4.0,and avoid the version 0.4.0