RSS   Podatności dla 'News page'   RSS

2009-05-01
 
CVE-2009-1505

CWE-89
 
 
SQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote authenticated users, with News Page nodes create and edit privileges, to execute arbitrary SQL commands via the Include Words (aka keywords) field.

 

 >>> Vendor: Drupal 148 Produkty
Project
Shoutbox
Drupal
TALK
FAQ
E-publish
Workflow
Form mail module
Job search
Bibliography module
Recipe module
Drupal easylinks module
Drupal e-commerce module
Drupal pathauto module
Drupal pubcookie module
Drupal userreview module
Search keyword module
Site profile directory module
Extended tracker
Cvs management and tracker
Chatroom module
Help tip module
Drupal project
Drupal project issue tracking
Drupal mysite
Imce module
Project issue tracking module
Acidfree
Textimage
Secure site module
Audio module
Getid3
Mediafield module
Nodefamily
Openid
Database administration module
Print module
Forward module
Logintoboggan module
Content construction kit
Commons
Storm
Weblinks
Asin field module
E-commerce module
Fullname field for cck
Invite module
Node relativity module
Pathauto module
Paypal node module
Token module
Ubercart module
Feature module
Meta tags module
Bueditor
Atom module
Fileshare module
Archive module
Comment upload module
Userpoints module
Header image
Webform module
Internationalization
Localizer
Site documentation module
Node hierarchy module
Magic tabs module
Taxonomy image module
Trailscout module
Aggregation module
Taxonomy autotagger module
Organic groups module
Outline designer module
Tinytax taxonomy block module
Suggested terms module
Upload module
Mailsave
Mailhandler
Link to us
Brilliant gallery
Shindig-integrator
Node clone
Stock module
Ajax checklist
Views
Everyblog
Semantically interconnected online communities
Localization client
Localization server
User karma module
Comment mail
QUIZ
Views bulk operations
Link module
Protected node module
Taxonomy theme module
Tasklist
Plus1
Print
Feedapi mapper
Zobacz wszystkie produkty dla producenta Drupal

Copyright 2024, cxsecurity.com

 

Back to Top