CVE:CVE-2007-6695
CNNVD:CNNVD-200802-001
Drake CMS 0.4.9的index.php中存在跨站脚本攻击漏洞。远程攻击者通过option参数，注入任意web脚本或HTML。
solution:Upgrade drake_team drake_cms to a higher version than 0.4.9,and avoid the version 0.4.9