CVEvulnerability
CVE-2008-4793
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-10-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The node module API in Drupal 5.x before 5.11 allows remote attackers to bypass node validation and have unspecified other impact via unknown vectors related to contributed modules.
Affected configurations
• drupal drupal (<= 5.10)
• drupal drupal 5.0
• drupal drupal 5.1
• drupal drupal 5.2
• drupal drupal 5.3
• drupal drupal 5.4
• drupal drupal 5.5
• drupal drupal 5.6
• drupal drupal 5.7
• drupal drupal 5.8
• drupal drupal 5.9
Related
Weakness · not in database (1)
References
- http://drupal.org/node/318706 Patch, Vendor Advisory
- http://secunia.com/advisories/32200 secunia.com
- http://www.openwall.com/lists/oss-security/2008/10/21/7 www.openwall.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45763 exchange.xforce.ibmcloud.com
- http://drupal.org/node/318706 Patch, Vendor Advisory
- http://secunia.com/advisories/32200 secunia.com
- http://www.openwall.com/lists/oss-security/2008/10/21/7 www.openwall.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45763 exchange.xforce.ibmcloud.com