CVE:CVE-2009-2610
CNNVD:CNNVD-200907-382
Drupal Links Package 5.x-1.13之前的5.x版本以及6.x-1.2之前的6.x版本中的Links Related module中的跨站脚本漏洞允许远程授权用户借助title字段注入任意的Web脚本或HTML。
solution:Upgrade scott_courtney links_package to a higher version than 5.x-1.2,5.x-1.4,5.x-1.5,5.x-1.6,5.x-1.7,5.x-1.8,5.x-1.9,5.x-1.11,5.x-1.12,5.x-1.12-beta1,5.x-1.x-dev,6.x-1.0,6.x-1.0-beta1,6.x-1.0-beta2,6.x-1.0-beta3,6.x-1.0-beta5,6.x-1.0-beta6,6.x-1.0-beta7,6.x-1.0-beta10,6.x-1.0-beta11,6.x-1.0-beta12,6.x-1.0-beta13,6.x-1.0-beta14,6.x-1.0-beta15,6.x-1.1,6.x-1.x-dev,and avoid the version 5.x-1.2,5.x-1.4,5.x-1.5,5.x-1.6,5.x-1.7,5.x-1.8,5.x-1.9,5.x-1.11,5.x-1.12,5.x-1.12-beta1,5.x-1.x-dev,6.x-1.0,6.x-1.0-beta1,6.x-1.0-beta2,6.x-1.0-beta3,6.x-1.0-beta5,6.x-1.0-beta6,6.x-1.0-beta7,6.x-1.0-beta10,6.x-1.0-beta11,6.x-1.0-beta12,6.x-1.0-beta13,6.x-1.0-beta14,6.x-1.0-beta15,6.x-1.1,6.x-1.x-dev