CVE:CVE-2007-5270
CNNVD:CNNVD-200710-123
Drupal的Boost module存在未明漏洞,远程攻击者可以借助未明向量新建或重写任意文件,并导致跨站脚本攻击。
solution:Upgrade bendiken boost_module_for_drupal to a higher version than 4.7.-1.0,5.-1.0,and avoid the version (,4.7.-1.0],(,5.-1.0]