|
|
| |
|
| |
drupal: arbitrary file execution
| Package(s): | drupal |
CVE #(s): | CVE-2006-2742
CVE-2006-2743
CVE-2006-2831
CVE-2006-2832
CVE-2006-2833
|
| Created: | July 27, 2006 |
Updated: | August 2, 2006 |
| Description: |
The Drupal web platform has a number of remotely exploitable
vulnerabilities including:
An SQL injection vulnerability in the "count" and "from" variables of the database interface.
Incorrect file extension handling in an Apache/mod_mime environment.
A cross-site scripting vulnerability in the upload module.
A cross-site scripting vulnerability in the taxonomy module. |
| Alerts: |
|
( Log in to post comments)
|
|
|