Description

install.php in Drupal 5.x before 5.3, when the configured database server is not reachable, allows remote attackers to execute arbitrary code via vectors that cause settings.php to be modified.

Remediation

References

CVE-2007-5593

Related Vulnerabilities

Oracle JRE CVE-2013-2442 Vulnerability (CVE-2013-2442)

WordPress Plugin BannerMan Cross-Site Scripting (0.2.4)

WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60201)

Jboss EAP Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2019-14379)

WordPress 4.2.2 Multiple Vulnerabilities (0.7 - 4.2.2)

Severity

Medium

Classification

CVE-2007-5593 CWE-94

Tags

Missing Update Known Vulnerabilities