CVE:CVE-2008-1980
CNNVD:CNNVD-200804-394
5.x-1.1以前的E-Publish 5.x 和 6.x-1.0 beta1以前的Drupal6.x模块中存在跨站脚本攻击漏洞。远程攻击者通过未明向量来注入任意web脚本或HTML。
solution:Upgrade drupal e-publish to a higher version than 5-1.1,*:beta1,and avoid the version (,5-1.1],*:beta1