CVE:CVE-2008-6169
CNNVD:CNNVD-200902-396
Drupal是一个开放源码的内容管理平台。   
Drupal的定位客户端模块5.x-1.1之前的版本5.x和6.x-1.6之前的版本6.x以及定位服务器5.x-1.0-alpha5之前的版本5.x和6.x-alpha2之前的版本6.x中存在跨站请求伪造漏洞。远程攻击者可以借助与"本地翻译本地提交界面"有关的未明向量，仿效管理员执行未授权操作。
solution:Upgrade drupal localization_client to a higher version than 5.x-1.0,6.x-1.5,5.x-1.xdev,6.x-1.0,6.x-1.1,6.x-1.2,6.x-1.3,6.x-1.4,6.x-1.xdev,and avoid the version (,5.x-1.0],(,6.x-1.5],5.x-1.xdev,6.x-1.0,6.x-1.1,6.x-1.2,6.x-1.3,6.x-1.4,6.x-1.xdev; Upgrade drupal localization_server to a higher version than 5.x-1.0alpha4,6.x-1.0alpha1,5.x-1.0alpha1,5.x-1.0alpha2,5.x-1.0alpha3,5.x-1.xdev,6.x-1.xdev,and avoid the version (,5.x-1.0alpha4],(,6.x-1.0alpha1],5.x-1.0alpha1,5.x-1.0alpha2,5.x-1.0alpha3,5.x-1.xdev,6.x-1.xdev