CVE:CVE-2009-4515
CNNVD:CNNVD-200912-434
Drupal Storm模块没有为storminvoiceitem节点执行特权检查，这使得远程攻击者可以借助未明向量，读取节点标题。
solution:Upgrade speedtech storm to a higher version than 6.x-1.0,6.x-1.1,6.x-1.2,6.x-1.3,6.x-1.4,6.x-1.5,6.x-1.6,6.x-1.7,6.x-1.8,6.x-1.9,6.x-1.10,6.x-1.11,6.x-1.12,6.x-1.13,6.x-1.14,6.x-1.15,6.x-1.16,6.x-1.17,6.x-1.18,6.x-1.19,6.x-1.20,6.x-1.21,6.x-1.22,6.x-1.23,6.x-1.24,6.x-1.x:dev,and avoid the version 6.x-1.0,6.x-1.1,6.x-1.2,6.x-1.3,6.x-1.4,6.x-1.5,6.x-1.6,6.x-1.7,6.x-1.8,6.x-1.9,6.x-1.10,6.x-1.11,6.x-1.12,6.x-1.13,6.x-1.14,6.x-1.15,6.x-1.16,6.x-1.17,6.x-1.18,6.x-1.19,6.x-1.20,6.x-1.21,6.x-1.22,6.x-1.23,6.x-1.24,6.x-1.x:dev