CVE:CVE-2006-5608
CNNVD:CNNVD-200610-523
Drupal的Extended Tracker (xtracker)中存在SQL注入漏洞，允许远程攻击者通过与"URL的参数"相关的未明向量来执行任意SQL命令。
solution:Upgrade drupal extended_tracker to a higher version than 4.7,and avoid the version 4.7