CVSS: 3.5EPSS: 0%CPEs: 14EXPL: 0CVE-2007-5621
https://notcve.org/view.php?id=CVE-2007-5621
Multiple cross-site scripting (XSS) vulnerabilities in the Token module before 4.7.x-1.5, and 5.x before 5.x-1.9, for Drupal; as used by the ASIN Field, e-Commerce, Fullname field for CCK, Invite, Node Relativity, Pathauto, PayPal Node, and Ubercart modules; allow remote authenticated users with a post comments privilege to inject arbitrary web script or HTML via unspecified vectors related to (1) comments, (2) vocabulary names, (3) term names, and (4) usernames. Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el módulo Toke versiones anteriores a 4.7.x-1.5, y 5.x versiones anteriores a 5.x-1.9, para Drupal; tal y como se usa en los módulos ASIN Field, e-Commerce, campo Fullname para CCK, Invite, Node Relativity, Pathauto, PayPal Node, y Ubercart; permiten a atacantes remotos autenticados con privilegios de enviar comentarios, inyectar scripts web o HTML de su elección mediante vectores no especificados relativos a (1) comments, (2) vocabulary names, (3) term names, y (4) usernames. • http://drupal.org/node/184336 http://osvdb.org/38073 http://secunia.com/advisories/27291 https://exchange.xforce.ibmcloud.com/vulnerabilities/37275 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2007-5596
https://notcve.org/view.php?id=CVE-2007-5596
The core Upload module in Drupal 4.7.x before 4.7.8 and 5.x before 5.3 places the .html extension on a whitelist, which allows remote attackers to conduct cross-site scripting (XSS) attacks by uploading .html files. El núcleo del módulo Upload en el Drupal 4.7.x anterior al 4.7.8 y en el 5.x anterior al 5.3 establece la extensión .html en una lista blanca, lo que permite a usuarios remotos llevan a cabo ataques de secuencias de comandos en sitios cruzados (XSS) mediante la actualización de ficheros .html. • http://drupal.org/node/184320 http://secunia.com/advisories/27292 http://secunia.com/advisories/27352 http://www.securityfocus.com/bid/26119 http://www.vupen.com/english/advisories/2007/3546 https://exchange.xforce.ibmcloud.com/vulnerabilities/37274 https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00328.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2007-5597
https://notcve.org/view.php?id=CVE-2007-5597
The hook_comments API in Drupal 4.7.x before 4.7.8 and 5.x before 5.3 does not pass publication status, which might allow attackers to bypass access restrictions and trigger e-mail with unpublished comments from some modules, as demonstrated by (1) Organic groups and (2) Subscriptions. El API hook_comments en el Drupal 4.7.x anterior al 4.7.8 y el 5.x anterior al 5.3 no pasa el estado de publicación, lo que puede permitir a atacantes evitar las restricciones de acceso y disparar un e-mail con comentarios no publicados de ciertos módulos, como lo demostrado en (1) los grupos Organic y (2) Subscriptions. • http://drupal.org/node/184354 http://secunia.com/advisories/27292 http://secunia.com/advisories/27352 http://www.securityfocus.com/bid/26119 http://www.vupen.com/english/advisories/2007/3546 https://exchange.xforce.ibmcloud.com/vulnerabilities/37296 https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00328.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2007-5594
https://notcve.org/view.php?id=CVE-2007-5594
Drupal 5.x before 5.3 does not apply its Drupal Forms API protection against the user deletion form, which allows remote attackers to delete users via a cross-site request forgery (CSRF) attack. El Drupal 5.x anterior al 5.3 no aplican su protección Drupal Forms API contra la forma de borrado de usuario, lo que permite a atacantes remotos borrar usuarios a través de un ataque de falsificación de petición en sitios cruzados (CSRF). • http://drupal.org/node/184348 http://secunia.com/advisories/27290 http://secunia.com/advisories/27352 http://www.securityfocus.com/bid/26119 https://exchange.xforce.ibmcloud.com/vulnerabilities/37268 https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00328.html • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 5.1EPSS: 1%CPEs: 2EXPL: 0CVE-2007-5595
https://notcve.org/view.php?id=CVE-2007-5595
CRLF injection vulnerability in the drupal_goto function in includes/common.inc Drupal 4.7.x before 4.7.8 and 5.x before 5.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Vulnerabilidad de inyección CRLF (CR (retorno de carro) y LF (salto de línea)) en la función drupal_goto del includes/common.inc Drupal 4.7.x anterior al 4.7.8 y el 5.x anterior al 5.3 permite a atacantes remotos la inyección de cabeceras HTTP de su elección y llevar a cabo ataques de división de respuesta HTTP a través de vectores sin especificar. • http://drupal.org/node/184315 http://secunia.com/advisories/27292 http://secunia.com/advisories/27352 http://www.securityfocus.com/bid/26119 http://www.vupen.com/english/advisories/2007/3546 https://exchange.xforce.ibmcloud.com/vulnerabilities/37264 https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00328.html • CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') •