Lucene search
MitreCVE-2009-1505HistoryMay 01, 2009 - 5:30 p.m.
CVE-2009-1505
2009-05-0117:30:00
CWE-89
mitre
web.nvd.nist.gov
23
cve-2009-1505
sql injection
drupal
news page module
vulnerability
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
8.3
Confidence
Low
EPSS
0.003
Percentile
71.2%
SQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote authenticated users, with News Page nodes create and edit privileges, to execute arbitrary SQL commands via the Include Words (aka keywords) field.
Affected configurations
Node
drupaldrupal
drupalnews_pageMatch5.x-1.1
ORdrupalnews_pageMatch5.x-1.xdev
Related
prion
prion
Sql injection
2009-05-01 17:30:00
cvelist
cvelist
CVE-2009-1505
2009-05-01 17:00:00
nvd
nvd
CVE-2009-1505
2009-05-01 17:30:00
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
8.3
Confidence
Low
EPSS
0.003
Percentile
71.2%
Related for CVE-2009-1505