CVE:CVE-2008-4530
CNNVD:CNNVD-200810-156
Drupal的一个模块Brilliant Gallery中存在跨站脚本攻击漏洞,具有许可的远程认证用户可以通过与粘贴答案有关的未明向量来执行任意web脚本或HTML。
solution:Upgrade drupal brilliant_gallery to a higher version than 5.x-4.1,5.x-1.0,5.x-1.1,5.x-1.2,5.x-2.1,5.x-2.2,5.x-2.3,5.x-2.4,5.x-2.5,5.x-2.6,5.x-2.7,5.x-2.8,5.x-2.9,5.x-2.10,5.x-2.11,5.x-2.12,5.x-2.13,5.x-2.14,5.x-2.15,5.x-2.16,5.x-2.17,5.x-3.0,5.x-3.1,5.x-3.2,5.x-3.3,5.x-4.0,and avoid the version (,5.x-4.1],5.x-1.0,5.x-1.1,5.x-1.2,5.x-2.1,5.x-2.2,5.x-2.3,5.x-2.4,5.x-2.5,5.x-2.6,5.x-2.7,5.x-2.8,5.x-2.9,5.x-2.10,5.x-2.11,5.x-2.12,5.x-2.13,5.x-2.14,5.x-2.15,5.x-2.16,5.x-2.17,5.x-3.0,5.x-3.1,5.x-3.2,5.x-3.3,5.x-4.0