CVE:CVE-2009-3780
CNNVD:CNNVD-200910-378
Drupal Abuse 5.x-2.1版本之前的5.x版本以及6.x-1.1-alpha1版本之前的版本6.x中存在跨站脚本攻击漏洞。远程攻击者可以借助未明向量注入任意web脚本或HTML。
solution:Upgrade ashok_modi abuse to a higher version than 5.x-1.0:beta,5.x-1.x-dev,5.x-2.x-dev,and avoid the version 5.x-1.0:beta,5.x-1.x-dev,5.x-2.x-dev