CVE:CVE-2009-4520
CNNVD:CNNVD-200912-439
Drupal CCK Comment Reference模块允许远程攻击者通过使用自动完成路径，绕过设置的访问限制和读取评论。
solution:Upgrade kristof_de_jaeger commentreference to a higher version than 5.x-1.1,6.x-1.2,5.x-1.0,5.x-1.x-dev,6.x-1.0,6.x-1.1,6.x-1.x-dev,and avoid the version (,5.x-1.1],(,6.x-1.2],5.x-1.0,5.x-1.x-dev,6.x-1.0,6.x-1.1,6.x-1.x-dev