CVE-2006-4108

Currently unrated

Key Information:

Vendor
Drupal
Status
Bibliography Module
Vendor
CVE Published:
14 August 2006

Summary

SQL injection vulnerability in Bibliography (biblio.module) 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

http://secunia.com/advisories/21435
third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/3227
vdb-entryx_refsource_VUPEN
http://drupal.org/node/77756
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.