CVE:CVE-2012-2084
CNNVD:CNNVD-201211-438
Drupal是Drupal社区所维护的一套用PHP语言开发的免费、开源的内容管理系统。
Drupal中的Printer，email以及PDF模块6.x-1.15之前的6.x-1.x版本和7.x-1.0前的7.x-1.x版本中存在跨站脚本漏洞。远程攻击者利用该漏洞通过未明向量（可能为PATH_INFO），注入任意web脚本或HTML。
solution:Upgrade joao_ventura print to a higher version than 6.x-1.0,6.x-1.0:rc1,6.x-1.0:rc2,6.x-1.0:rc3,6.x-1.0:rc4,6.x-1.0:rc5,6.x-1.0:rc8,6.x-1.0:rc9,6.x-1.1,6.x-1.2,6.x-1.3,6.x-1.4,6.x-1.5,6.x-1.6,6.x-1.7,6.x-1.8,6.x-1.9,6.x-1.10,6.x-1.11,6.x-1.11:beta1,6.x-1.12,6.x-1.13,6.x-1.14,6.x-1.x:dev,7.x-10:alpha1,7.x-10:alpha2,7.x-10:beta1,7.x-10:beta2,7.x-10:dev,and avoid the version 6.x-1.0,6.x-1.0:rc1,6.x-1.0:rc2,6.x-1.0:rc3,6.x-1.0:rc4,6.x-1.0:rc5,6.x-1.0:rc8,6.x-1.0:rc9,6.x-1.1,6.x-1.2,6.x-1.3,6.x-1.4,6.x-1.5,6.x-1.6,6.x-1.7,6.x-1.8,6.x-1.9,6.x-1.10,6.x-1.11,6.x-1.11:beta1,6.x-1.12,6.x-1.13,6.x-1.14,6.x-1.x:dev,7.x-10:alpha1,7.x-10:alpha2,7.x-10:beta1,7.x-10:beta2,7.x-10:dev