CVE-2007-2160

CVE-2007-2160 concerns Drupal, specifically CSRF vulnerabilities in the Database Administration (dba) module. The issue affects Drupal 4.6.x-, and the 4.7.x-1. series up to 4.7.1.2, allowing remote attackers to perform unauthorized actions as an arbitrary user. The root cause is cross-site reques...

CVE-2007-2159

Affected software: Drupal, in the Database Administration (dba) module ranges 4.6.x-* and 4.7.x-1.*. Vulnerability: multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary script or HTML. Root cause: not explicitly detailed beyond generic XSS in the module UI and...

CVE-2007-2159: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in the Database Administration dba module 4.6.x-, and before 4.7.x-1.2 in the 4.7.x-1. series, for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors relating to 1 direct display of data from the database...

CVE-2007-2160: Undefined Security Weakness

Multiple cross-site request forgery CSRF vulnerabilities in the Database Administration dba module 4.6.x-, and before 4.7.x-1.2 in the 4.7.x-1. series, for Drupal allow remote attackers to perform unauthorized actions as an arbitrary user, a related issue to CVE-2006-5476...