CVE

Id
28950  
CVE No.
CVE-2007-5593  
Status
Candidate  
Description
install.php in Drupal 5.x before 5.3, when the configured database server is not reachable, allows remote attackers to execute arbitrary code via vectors that cause settings.php to be modified.  
Phase
Assigned (20071019)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
303347 28950 CVE-2007-5593 MISC:http://drupal.org/files/sa-2007-025/SA-2007-025-5.2.patch  View
303348 28950 CVE-2007-5593 CONFIRM:http://drupal.org/node/184316  View
303349 28950 CVE-2007-5593 FEDORA:FEDORA-2007-2649  View
303350 28950 CVE-2007-5593 URL:https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00328.html  View
303351 28950 CVE-2007-5593 BID:26119  View
303352 28950 CVE-2007-5593 URL:http://www.securityfocus.com/bid/26119  View
303353 28950 CVE-2007-5593 OSVDB:39648  View
303354 28950 CVE-2007-5593 URL:http://osvdb.org/39648  View
303355 28950 CVE-2007-5593 SECUNIA:27290  View
303356 28950 CVE-2007-5593 URL:http://secunia.com/advisories/27290  View
303357 28950 CVE-2007-5593 SECUNIA:27352  View
303358 28950 CVE-2007-5593 URL:http://secunia.com/advisories/27352  View
303359 28950 CVE-2007-5593 XF:drupal-installer-code-execution(37265)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54123 JVNDB-2007-002815 Drupal の drupal_goto 関数における CRLF インジェクションの脆弱性 Drupal の includes/common.inc の drupal_goto 関数には、CRLF インジェクションの脆弱性が存在します。 CVE-2007-5595 28950 5.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002815.html  View