CVE-2007-2160

CVE-2007-2160 concerns Drupal, specifically CSRF vulnerabilities in the Database Administration (dba) module. The issue affects Drupal 4.6.x-, and the 4.7.x-1. series up to 4.7.1.2, allowing remote attackers to perform unauthorized actions as an arbitrary user. The root cause is cross-site reques...

CVE-2007-2159

Affected software: Drupal, in the Database Administration (dba) module ranges 4.6.x-* and 4.7.x-1.*. Vulnerability: multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary script or HTML. Root cause: not explicitly detailed beyond generic XSS in the module UI and...