CVE:CVE-2008-4148
CNNVD:CNNVD-200809-337
Drupal Mailhandler 模块中存在SQL注入漏洞,远程攻击者可以通过未明向量来执行任意SQL命令。它与不运行Drupal数据库AP的构成查询有关。
solution:Upgrade drupal mailhandler to a higher version than 5.x-1.3,6.x-1.3,5.x-1.0,5.x-1.1,5.x-1.2,5.x-1.x-dev,6.x-1.0,6.x-1.1,6.x-1.2,6.x-1.x-dev,and avoid the version (,5.x-1.3],(,6.x-1.3],5.x-1.0,5.x-1.1,5.x-1.2,5.x-1.x-dev,6.x-1.0,6.x-1.1,6.x-1.2,6.x-1.x-dev