CVE:CVE-2007-5595
CNNVD:CNNVD-200710-403
Drupal的includes/common.inc的drupal_goto函数中存在CRLF 注入漏洞。远程攻击者可以借助未明向量，注入任意HTTP页眉并执行HTTP响应分裂攻击。
solution:Upgrade drupal drupal to a higher version than 4.7.8,5.3,and avoid the version [4.7.0,4.7.8),[5.0,5.3)