CVE:CVE-2009-4525
CNNVD:CNNVD-200912-444
Drupal Print(又称打印机、电子邮件和PDF版本)模块中存在跨站脚本攻击漏洞。远程攻击者可以借助链接列表中的特制数据，注入任意的web脚本或HTML。
solution:Upgrade joao_ventura print to a higher version than 5.x-4.0,5.x-4.1,5.x-4.2,5.x-4.3,5.x-4.4,5.x-4.5,5.x-4.6,5.x-4.7,5.x-4.8,5.x-4.x:dev,6.x-1.0,6.x-1.0:rc1,6.x-1.0:rc2,6.x-1.0:rc3,6.x-1.0:rc4,6.x-1.0:rc5,6.x-1.0:rc8,6.x-1.0:rc9,6.x-1.1,6.x-1.2,6.x-1.3,6.x-1.4,6.x-1.5,6.x-1.6,6.x-1.7,6.x-1.x:dev,and avoid the version 5.x-4.0,5.x-4.1,5.x-4.2,5.x-4.3,5.x-4.4,5.x-4.5,5.x-4.6,5.x-4.7,5.x-4.8,5.x-4.x:dev,6.x-1.0,6.x-1.0:rc1,6.x-1.0:rc2,6.x-1.0:rc3,6.x-1.0:rc4,6.x-1.0:rc5,6.x-1.0:rc8,6.x-1.0:rc9,6.x-1.1,6.x-1.2,6.x-1.3,6.x-1.4,6.x-1.5,6.x-1.6,6.x-1.7,6.x-1.x:dev