CVE:CVE-2007-3818
CNNVD:CNNVD-200707-298
Drupal LoginToboggan 模数 5.x-1.x-dev 20070712版本之前的版本中存在跨站脚本攻击漏洞。具有"管理员障碍"许可的远程验证用户可以借助"在默认用户登录障碍至上的展示信息"，注入任意JavaScript和获得权限。
solution:Upgrade drupal logintoboggan_module to a higher version than 4.7.x-1.0,5.x-1.x-dev,and avoid the version (,4.7.x-1.0],(,5.x-1.x-dev]
solution:Upgrade microsoft windows_xp to a higher version than *:gold,and avoid the version *:gold