CVE:CVE-2011-4560
CNNVD:CNNVD-201111-459
Drupal是Drupal社区所维护的一套用PHP语言开发的免费、开源的内容管理系统。
Drupal的Petition Node模块6.x-1.5之前的6.x-1.x版本中存在跨站脚本（XSS）漏洞。远程认证用户可以借助与请求签字有关的未明向量注入任意web脚本或者HTML。
solution:Upgrade drupal petition_node_module to a higher version than 6.x-1.1,6.x-1.1:beta1,6.x-1.1:beta2,6.x-1.1:beta3,6.x-1.1:beta4,6.x-1.1:beta5,6.x-1.1:beta6,6.x-1.1:dev,6.x-1.2,6.x-1.3,6.x-1.4,and avoid the version 6.x-1.1,6.x-1.1:beta1,6.x-1.1:beta2,6.x-1.1:beta3,6.x-1.1:beta4,6.x-1.1:beta5,6.x-1.1:beta6,6.x-1.1:dev,6.x-1.2,6.x-1.3,6.x-1.4