EUVD-2008-6245

Malware in sbrugna...

EUVD-2008-6246

Malware in sbrugna...

Sql injection

Multiple SQL injection vulnerabilities in the User Karma module 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1, a module for Drupal, allow remote authenticated administrators to execute arbitrary SQL commands via 1 a content type or 2 a voting API value...

CVE-2008-6275

Cross-site scripting XSS vulnerability in the User Karma module 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified messages...

CVE-2008-6276

CVE-2008-6276 describes SQL injection vulnerabilities in the Drupal module User Karma. Affected versions are 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1. The flaws allow remote authenticated administrators to execute arbitrary SQL commands via either a content type or a voting API value. The...

CVE-2008-6275

The CVE-2008-6275 entry describes a cross-site scripting (XSS) vulnerability in the Drupal User Karma module (versions 5.x prior to 5.x-1.13 and 6.x prior to 6.x-1.0-beta1). The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified messages. The available documents c...