Description

The node module API in Drupal 5.x before 5.11 allows remote attackers to bypass node validation and have unspecified other impact via unknown vectors related to contributed modules.

Remediation

References

CVE-2008-4793

Related Vulnerabilities

WordPress Plugin Profile Builder Pro Security Bypass (3.1.0)

Oracle Database Server Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-3132)

Squid Reachable Assertion Vulnerability (CVE-2023-49286)

SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0893)

Frontaccounting Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5148)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2008-4793