CVE:CVE-2008-4531
CNNVD:CNNVD-200810-157
Drupal的一个模块Brilliant Gallery中存在SQL注入漏洞，远程攻击者可以通过未明向量来执行任意SQL命令，它与查询有关。
solution:Upgrade drupal brilliant_gallery to a higher version than 5.x-4.1,5.x-1.0,5.x-1.1,5.x-1.2,5.x-2.1,5.x-2.2,5.x-2.3,5.x-2.4,5.x-2.5,5.x-2.6,5.x-2.7,5.x-2.8,5.x-2.9,5.x-2.10,5.x-2.11,5.x-2.12,5.x-2.13,5.x-2.14,5.x-2.15,5.x-2.16,5.x-2.17,5.x-3.0,5.x-3.1,5.x-3.2,5.x-3.3,5.x-4.0,and avoid the version (,5.x-4.1],5.x-1.0,5.x-1.1,5.x-1.2,5.x-2.1,5.x-2.2,5.x-2.3,5.x-2.4,5.x-2.5,5.x-2.6,5.x-2.7,5.x-2.8,5.x-2.9,5.x-2.10,5.x-2.11,5.x-2.12,5.x-2.13,5.x-2.14,5.x-2.15,5.x-2.16,5.x-2.17,5.x-3.0,5.x-3.1,5.x-3.2,5.x-3.3,5.x-4.0