CVE:CVE-2009-2035
CNNVD:CNNVD-200906-238
Drupal Services 6.x-0.14版本之前的6.x版本中存在未明漏洞, 当基于索引的访问被激活时,远程攻击者可以借助未明向量读取或添加索引并访问未授权服务。
solution:Upgrade drupal services_module_for_drupal to a higher version than 6.x-0.13,6.x-0.12,and avoid the version (,6.x-0.13],6.x-0.12