CVE:CVE-2007-6640
CNNVD:CNNVD-200801-031
从0.9到1.1版本的Creammonkey和从1.2到1.3版本的GreaseKit没有恰当地阻止危险功能，这允许远程攻击者通过以下几种方式查看并修改配置：(1)GM_addstlye,(2)GM_log,(3)GM_openInTab,(4)GM_setValue,(5)GM_getValue,(6)GM_xmlhttpRequest function。
solution:Upgrade sourceforge creammonkey to a higher version than 0.9,1.0,1.1,and avoid the version 0.9,1.0,1.1; Upgrade sourceforge greasekit to a higher version than 1.2,1.3,and avoid the version 1.2,1.3