CVE-2007-0507

CVE-2007-0507 : This vulnerability affects the Drupal Acidfree module, with affected versions listed as before 4.6.x-1.0 and before 4.7.x-1.0 in the 4.7 series. An SQL injection allows remote authenticated users who have the "create acidfree albums" privilege to execute arbitrary SQL commands via...