CVE-2006-6530

The CVE-2006-6530 entry describes an SQL injection vulnerability in the Drupal Help Tip module older than 4.7.x-1.0. The affected component is the Help Tip module for Drupal; root cause involves SQL command injection via unspecified vectors, allowing remote attackers to potentially execute arbitr...

CVE-2006-6531

CVE-2006-6531 affects the Drupal Help Tip module prior to 4.7.x-1.0, where an XSS vulnerability exists that allows remote attackers to inject arbitrary script/HTML via node titles. Root cause is an input/output handling flaw in the module that fails to sanitize title content. Impact is partial co...