CVE:CVE-2008-4790
CNNVD:CNNVD-200810-499
Drupal中的核心上传模块允许远程认证用户借助未知向量，绕过设置的访问限制，读取"依附于内容的文件" 。
solution:Upgrade drupal drupal to a higher version than 5.10,5.0,5.0:beta1,5.0:beta2,5.0:rc1,5.0:rc2,5.1,5.2,5.3,5.4,5.5,5.6,5.7,5.8,5.9,and avoid the version (,5.10],5.0,5.0:beta1,5.0:beta2,5.0:rc1,5.0:rc2,5.1,5.2,5.3,5.4,5.5,5.6,5.7,5.8,5.9