CVE

Id
20211  
CVE No.
CVE-2006-4107  
Status
Candidate  
Description
SQL injection vulnerability in the Job Search module (job.module) 4.6 before revision 1.3.2.1 in Drupal allows remote attackers to execute arbitrary SQL commands via a job or resume search.  
Phase
Assigned (20060814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
187371 20211 CVE-2006-4107 CONFIRM:http://drupal.org/node/77537  View
187372 20211 CVE-2006-4107 BID:19420  View
187373 20211 CVE-2006-4107 URL:http://www.securityfocus.com/bid/19420  View
187374 20211 CVE-2006-4107 VUPEN:ADV-2006-3187  View
187375 20211 CVE-2006-4107 URL:http://www.vupen.com/english/advisories/2006/3187  View
187376 20211 CVE-2006-4107 SECUNIA:21380  View
187377 20211 CVE-2006-4107 URL:http://secunia.com/advisories/21380  View
187378 20211 CVE-2006-4107 XF:jobsearch-search-sql-injection(28274)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58813 JVNDB-2006-001079 Drupal 用の Bibliography におけるクロスサイトスクリプティングの脆弱性 Drupal 用の Bibliography (biblio.module) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-4109 20211 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001079.html  View