CVE-2007-2159 | BDVDB-2026-23643 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in the Database Administration (dba) module 4.6.x-*, and before 4.7.x-1.2 in the 4.7.x-1.* series, for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors relating to (1) direct display of data from the database and (2) other portions of the user interface.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/24848
http://www.vupen.com/english/advisories/2007/1360
http://osvdb.org/34961
http://drupal.org/node/135549

Exploit#

No public exploit known

History#

Version 12007-04-22Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.