4.3

CVE-2007-2159

EPSS 0.31%
Published 22.04.2007 19:19:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Multiple cross-site scripting (XSS) vulnerabilities in the Database Administration (dba) module 4.6.x-*, and before 4.7.x-1.2 in the 4.7.x-1.* series, for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors relating to (1) direct display of data from the database and (2) other portions of the user interface.

Affected products Warnungen 0 Metrics 2 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Drupal ≫ Database Administration Module Version4.6

Drupal ≫ Database Administration Module Version4.7

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.31%	0.51

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

http://drupal.org/node/135549

Patch

Vendor Advisory

http://osvdb.org/34961

http://secunia.com/advisories/24848

Patch

Vendor Advisory

http://www.vupen.com/english/advisories/2007/1360

https://nvd.nist.gov/vuln/detail/CVE-2007-2159

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2159

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2159

EUVD