CVE:CVE-2008-6383
CNNVD:CNNVD-200903-037
Storm是Drupal的一个重要组件，其中包括peedTech Organization(人员组织管理模块)和Resource Manager (资源里模块) 5.x-1.14之前的版本5.x和6.x-1.18之前的版本6.x中存在SQL注入漏洞。具有项目访问权的远程验证用户可以借助未明向量，执行任意SQL指令。
solution:Upgrade drupal storm to a higher version than 5.x-1.1,5.x-1.2,5.x-1.3,5.x-1.4,5.x-1.5,5.x-1.6,5.x-1.7,5.x-1.8,5.x-1.9,5.x-1.10,5.x-1.11,5.x-1.12,5.x-1.13,5.x-1.x-dev,6.x-1.0,6.x-1.1,6.x-1.2,6.x-1.3,6.x-1.4,6.x-1.5,6.x-1.6,6.x-1.7,6.x-1.8,6.x-1.9,6.x-1.10,6.x-1.11,6.x-1.12,6.x-1.13,6.x-1.14,6.x-1.15,6.x-1.16,6.x-1.17,6.x-1.x-dev,and avoid the version 5.x-1.1,5.x-1.2,5.x-1.3,5.x-1.4,5.x-1.5,5.x-1.6,5.x-1.7,5.x-1.8,5.x-1.9,5.x-1.10,5.x-1.11,5.x-1.12,5.x-1.13,5.x-1.x-dev,6.x-1.0,6.x-1.1,6.x-1.2,6.x-1.3,6.x-1.4,6.x-1.5,6.x-1.6,6.x-1.7,6.x-1.8,6.x-1.9,6.x-1.10,6.x-1.11,6.x-1.12,6.x-1.13,6.x-1.14,6.x-1.15,6.x-1.16,6.x-1.17,6.x-1.x-dev