Advisory ID: DRUPAL-SA-2007-001.
Project: Drupal Core.
Version: 4.6, 4.7.
Date: 2007-Jan-05.
Security risk: Less critical.
Exploitable from: Remote.
Vulnerability: Cross site scripting.

Advisory ID: DRUPAL-SA-2007-002.
Project: Drupal Core.
Version: 4.6, 4.7
Date: 2007-Jan-05.
Security risk: Less critical.
Exploitable from: Remote.
Vulnerability: Denial of service.

Для 4.6.х версии рекомендуется обновится:
http://ftp.osuosl.org/pub/drupal/files/projects/drupal-4.6.11.tar.gz

Для 4.7.х версии рекомендуется обновится:
http://ftp.osuosl.org/pub/drupal/files/projects/drupal-4.7.5.tar.gz