CVE:CVE-2011-1663
CNNVD:CNNVD-201104-058
基于Drupal的Translation Management模块6.x-1.21之前的6.x版本中存在SQL注入漏洞。某些未明输入还未经过正确过滤就被用于SQL查询，远程攻击者可以通过注入任意SQL代码执行SQL查询。
solution:Upgrade icanlocalize translation_management to a higher version than 6.x-1.0,6.x-1.0:beta1,6.x-1.0:beta2,6.x-1.0:beta3,6.x-1.0:beta4,6.x-1.0:beta5,6.x-1.0:beta6,6.x-1.0:beta7,6.x-1.1,6.x-1.2,6.x-1.2:beta1,6.x-1.3,6.x-1.4,6.x-1.5,6.x-1.6,6.x-1.7,6.x-1.8,6.x-1.9,6.x-1.20,6.x-1.x:dev,and avoid the version 6.x-1.0,6.x-1.0:beta1,6.x-1.0:beta2,6.x-1.0:beta3,6.x-1.0:beta4,6.x-1.0:beta5,6.x-1.0:beta6,6.x-1.0:beta7,6.x-1.1,6.x-1.2,6.x-1.2:beta1,6.x-1.3,6.x-1.4,6.x-1.5,6.x-1.6,6.x-1.7,6.x-1.8,6.x-1.9,6.x-1.20,6.x-1.x:dev