EUVD-2007-6266

Malware in sbrugna...

EUVD-2007-0838

Malware in sbrugna...

VBDrupal Cross Site Scripting

Exploit Title: VBDrupal Cross Site Scripting Date: 6.01.2012 Author: Sony Software Link: http://drupal.org/download Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/01/vbdrupal-cross-site-scripting.html...

CVE-2009-1576: Undefined Security Weakness

Unspecified vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows user-assisted remote attackers to obtain sensitive information by tricking victims into visiting the front page of the site with a crafted URL and causing form data to be sent to an...

CVE-2009-1575: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows remote attackers to inject arbitrary web script or HTML via crafted UTF-8 byte sequences before the Content-Type meta tag, which are treated as UTF-7 by Internet Explore...

Sql injection

Multiple SQL injection vulnerabilities in Drupal and vbDrupal 4.7.x before 4.7.9 and 5.x before 5.4 allow remote attackers to execute arbitrary SQL commands via modules that pass input to the taxonomyselectnodes function, as demonstrated by the 1 taxonomymenu, 2 ajaxLoader, and 3 ubrowser...

CVE-2007-6299

Multiple SQL injection vulnerabilities in Drupal and vbDrupal 4.7.x before 4.7.9 and 5.x before 5.4 allow remote attackers to execute arbitrary SQL commands via modules that pass input to the taxonomyselectnodes function, as demonstrated by the 1 taxonomymenu, 2 ajaxLoader, and 3 ubrowser...

CVE-2007-6299

Multiple SQL injection vulnerabilities in Drupal and vbDrupal 4.7.x before 4.7.9 and 5.x before 5.4 allow remote attackers to execute arbitrary SQL commands via modules that pass input to the taxonomyselectnodes function, as demonstrated by the 1 taxonomymenu, 2 ajaxLoader, and 3 ubrowser...

CVE-2007-6299

Multiple SQL injection vulnerabilities in Drupal and vbDrupal 4.7.x before 4.7.9 and 5.x before 5.4 allow remote attackers to execute arbitrary SQL commands via modules that pass input to the taxonomyselectnodes function, as demonstrated by the 1 taxonomymenu, 2 ajaxLoader, and 3 ubrowser...

CVE-2007-6299

CVE-2007-6299 affects Drupal 4.7.x before 4.7.9 and 5.x before 5.4. The vulnerability arises from the taxonomy_select_nodes function where input is directly injected into SQL queries, enabling SQL injection via contributed modules (e.g., taxonomy_menu, ajaxLoader, ubrowser). This allows remote at...

CVE-2007-6299: Improper Input Validation

Multiple SQL injection vulnerabilities in Drupal and vbDrupal 4.7.x before 4.7.9 and 5.x before 5.4 allow remote attackers to execute arbitrary SQL commands via modules that pass input to the taxonomyselectnodes function, as demonstrated by the 1 taxonomymenu, 2 ajaxLoader, and 3 ubrowser...

Design/Logic Flaw

Multiple unspecified vulnerabilities in vbDrupal before 4.7.6.0 have unknown impact and remote attack vectors. NOTE: the vector related to Drupal is covered by CVE-2007-0626. These vulnerabilities might be associated with other CVE identifiers...

CVE-2007-0841

Multiple unspecified vulnerabilities in vbDrupal before 4.7.6.0 have unknown impact and remote attack vectors. NOTE: the vector related to Drupal is covered by CVE-2007-0626. These vulnerabilities might be associated with other CVE identifiers...

CVE-2007-0841

CVE-2007-0841 covers VBDrupal before 4.7.6.0 with multiple unspecified vulnerabilities; the Drupal-related vector is addressed by CVE-2007-0626. The linked CVE-0626 specifies a remote code execution path via previewing comments in Drupal (and vbDrupal) before 4.7.6.0 (Drupal 4.7.6 and 5.x before ...

CVE-2007-0841

Multiple unspecified vulnerabilities in vbDrupal before 4.7.6.0 have unknown impact and remote attack vectors. NOTE: the vector related to Drupal is covered by CVE-2007-0626. These vulnerabilities might be associated with other CVE identifiers...

CVE-2007-0841: Undefined Security Weakness

Multiple unspecified vulnerabilities in vbDrupal before 4.7.6.0 have unknown impact and remote attack vectors. NOTE: the vector related to Drupal is covered by CVE-2007-0626. These vulnerabilities might be associated with other CVE identifiers...

CVE-2007-0626: Undefined Security Weakness

The commentformaddpreview function in comment.module in Drupal before 4.7.6, and 5.x before 5.1, and vbDrupal, allows remote attackers with "post comments" privileges and access to multiple input filters to execute arbitrary code by previewing comments, which are not processed by "normal form...