Description
Unknown vulnerability in Drupal 4.5.0 through 4.5.3, 4.6.0, and 4.6.1 allows remote attackers to execute arbitrary PHP code via a public comment or posting.
Remediation
References
Related Vulnerabilities
Drupal Core 5.x Security Bypass (5.0 - 5.2)
WordPress Plugin jQuery Tagline Rotator Cross-Site Scripting (0.1.5)
WordPress Plugin PhotoXhibit Multiple Cross-Site Scripting Vulnerabilities (2.1.8)
WordPress Other Vulnerability (CVE-2007-0107)
WordPress Plugin Gravity Forms Unspecified Vulnerability (2.4.17)