CVE:CVE-2006-4120
CNNVD:CNNVD-200608-235
Drupal 4.6软件及早期版本的Recipe模块(recipe.module) 1.54之前的版本存在跨站脚本攻击(XSS)漏洞，远程攻击者可借助不明向量注入任意Web脚本或HTML。
solution:Upgrade drupal drupal to a higher version than 4.6,4.0,4.4.0,4.4.1,4.4.2,4.5,4.5.1,4.5.2,4.5.3,4.5.4,4.5.5,4.5.6,4.5.7,and avoid the version (,4.6],4.0,4.4.0,4.4.1,4.4.2,4.5,4.5.1,4.5.2,4.5.3,4.5.4,4.5.5,4.5.6,4.5.7; Upgrade drupal recipe_module to a higher version than 1.53,and avoid the version (,1.53]