CVE:CVE-2007-5228
CNNVD:CNNVD-200710-085
Drupal的Project issue tracking module的次脚本函数中存在跨站脚本攻击漏洞，可以创立项目或编辑许可的远程验证用户可以借助包含一个(1) individual或(2) overview组成的未明向量注入任意web脚本或HTML。
solution:Upgrade drupal drupal_project_issue_tracking to a higher version than 4.7_1.0,4.7_1.2,4.7_2.0,4.7_2.1,4.7_2.2,5.0_0.1,and avoid the version 4.7_1.0,4.7_1.2,4.7_2.0,4.7_2.1,4.7_2.2,5.0_0.1