CVE:CVE-2006-6646
CNNVD:CNNVD-200612-423
Drupal(1)Project Issue Tracking 4.7.x-1.0和4.7.x-2.0，以及(2)Project 4.6.x-1.0、4.7.x-1.0和4.7.x-2.0版本存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可以通过未明参数(不使用check_plain函数)来注入任意Web脚本或HTML。
solution:Upgrade drupal drupal_project to a higher version than 4.6,4.6_1.0,4.7,4.7_1.0,4.7_2.0,and avoid the version 4.6,4.6_1.0,4.7,4.7_1.0,4.7_2.0; Upgrade drupal drupal_project_issue_tracking to a higher version than 4.7_1.0,4.7_2.0,and avoid the version 4.7_1.0,4.7_2.0