CVE:CVE-2011-1664
CNNVD:CNNVD-201104-059
基于Drupal的Translation Management模块6.x-1.21之前的6.x版本中存在跨站请求伪造漏洞。用户可以借助HTTP请求执行某些操作，而不是对这些请求的验证进行任何有效性检查，远程攻击者可利用该漏洞劫持未明受害者的认证。
solution:Upgrade icanlocalize translation_management to a higher version than 6.x-1.0,6.x-1.0:beta1,6.x-1.0:beta2,6.x-1.0:beta3,6.x-1.0:beta4,6.x-1.0:beta5,6.x-1.0:beta6,6.x-1.0:beta7,6.x-1.1,6.x-1.2,6.x-1.2:beta1,6.x-1.3,6.x-1.4,6.x-1.5,6.x-1.6,6.x-1.7,6.x-1.8,6.x-1.9,6.x-1.20,6.x-1.x:dev,and avoid the version 6.x-1.0,6.x-1.0:beta1,6.x-1.0:beta2,6.x-1.0:beta3,6.x-1.0:beta4,6.x-1.0:beta5,6.x-1.0:beta6,6.x-1.0:beta7,6.x-1.1,6.x-1.2,6.x-1.2:beta1,6.x-1.3,6.x-1.4,6.x-1.5,6.x-1.6,6.x-1.7,6.x-1.8,6.x-1.9,6.x-1.20,6.x-1.x:dev