Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Drupal Improper Input Validation Vulnerability - CVE-2007-6299 - Vulnerability Database
Drupal

Drupal Improper Input Validation Vulnerability - CVE-2007-6299

High
Reference: CVE-2007-6299
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2007-6299
Title: Drupal Improper Input Validation Vulnerability
Overview:

Multiple SQL injection vulnerabilities in Drupal and vbDrupal 4.7.x before 4.7.9 and 5.x before 5.4 allow remote attackers to execute arbitrary SQL commands via modules that pass input to the taxonomy_select_nodes function as demonstrated by the (1) taxonomy_menu (2) ajaxLoader and (3) ubrowser contributed modules.