CVE:CVE-2006-4355
CNNVD:CNNVD-200608-437
Drupal Easylinks模块(easylinks.module)1.5.2.1 2006/08/19 12:02:27之前发布的4.7版本存在跨站脚本攻击(XSS)漏洞，远程攻击者可借助不明向量注入任意Web脚本或HTML。
solution:Upgrade drupal drupal_easylinks_module to a higher version than 4.7,4.7.0,4.7.1,4.7.2,and avoid the version 4.7,4.7.0,4.7.1,4.7.2