4.3

CVE-2007-2159

EPSS 0.31%
Veröffentlicht 22.04.2007 19:19:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Multiple cross-site scripting (XSS) vulnerabilities in the Database Administration (dba) module 4.6.x-*, and before 4.7.x-1.2 in the 4.7.x-1.* series, for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors relating to (1) direct display of data from the database and (2) other portions of the user interface.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Drupal ≫ Database Administration Module Version4.6

Drupal ≫ Database Administration Module Version4.7

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.31%	0.51

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

http://drupal.org/node/135549

Patch

Vendor Advisory

http://osvdb.org/34961

http://secunia.com/advisories/24848

Patch

Vendor Advisory

http://www.vupen.com/english/advisories/2007/1360

https://nvd.nist.gov/vuln/detail/CVE-2007-2159

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2159

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2159

EUVD