EUVD-2006-4099

Malware in sbrugna...

CVE-2006-4107

CVE-2006-4107 describes an SQL injection vulnerability in Drupal’s Job Search module (job.module) for version 4.6 prior to revision 1.3.2.1. The vulnerability allows remote attackers to craft a job or resume search that could cause arbitrary SQL execution. The core issue is an injectable input ha...

CVE-2006-4107: Undefined Security Weakness

SQL injection vulnerability in the Job Search module job.module 4.6 before revision 1.3.2.1 in Drupal allows remote attackers to execute arbitrary SQL commands via a job or resume search...

DRUPAL-SA-2006-012: Jobsearch module

It is possible for a malicious user to inject SQL while searching for jobs or resumes using the Job Search module. Versions affected Please check the CVS $Id$ field in the file job.module to determine whether the version you are running is vulnerable. All 4.6 versions older than the following are...