CVEvulnerability
CVE-2007-5593
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-10-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-94
Description
install.php in Drupal 5.x before 5.3, when the configured database server is not reachable, allows remote attackers to execute arbitrary code via vectors that cause settings.php to be modified.
Affected configurations
• drupal drupal (>= 5.0 < 5.3)
• fedoraproject fedora 7
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://drupal.org/files/sa-2007-025/SA-2007-025-5.2.patch Patch, Vendor Advisory
- http://drupal.org/node/184316 Vendor Advisory
- http://osvdb.org/39648 Broken Link
- http://secunia.com/advisories/27290 Third Party Advisory
- http://secunia.com/advisories/27352 Third Party Advisory
- http://www.securityfocus.com/bid/26119 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37265 Third Party Advisory, VDB Entry
- https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00328.html Third Party Advisory
- http://drupal.org/files/sa-2007-025/SA-2007-025-5.2.patch Patch, Vendor Advisory
- http://drupal.org/node/184316 Vendor Advisory
- http://osvdb.org/39648 Broken Link
- http://secunia.com/advisories/27290 Third Party Advisory
- http://secunia.com/advisories/27352 Third Party Advisory
- http://www.securityfocus.com/bid/26119 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37265 Third Party Advisory, VDB Entry
- https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00328.html Third Party Advisory