CVE:CVE-2006-4108
CNNVD:CNNVD-200608-223
Drupal软件的Bibliography (biblio.module) 4.6修订版1.1.1.1.4.11之前的版本和4.7修订版1.13.2.5之前的版本存在SQL注入漏洞，远程攻击者可借助不明向量执行任意SQL指令。
solution:Upgrade drupal bibliography_module to a higher version than 4.5,4.6_rev1.1.1.1.4.10,4.7_rev1.13.2.4,and avoid the version (,4.5],(,4.6_rev1.1.1.1.4.10],(,4.7_rev1.13.2.4]