CVE:CVE-2009-3919
CNNVD:CNNVD-200911-089
Drupal NGP COO/CWP Integration(crmngp)模块6.x-1.12之前的6.x版本中存在跨站脚本攻击漏洞。远程攻击者可以借助未明的"用户提供的信息"，注入任意的web脚本或HTML。
solution:Upgrade sean_robertson crmngp to a higher version than 6.x-1.0,6.x-1.1,6.x-1.2,6.x-1.3,6.x-1.4,6.x-1.5,6.x-1.6,6.x-1.8,6.x-1.9,6.x-1.10,6.x-1.11,and avoid the version 6.x-1.0,6.x-1.1,6.x-1.2,6.x-1.3,6.x-1.4,6.x-1.5,6.x-1.6,6.x-1.8,6.x-1.9,6.x-1.10,6.x-1.11