high7.5
CVE-2008-2772
The Magic Tabs module 5.x before 5.x-1.1 for Drupal allows remote attackers to execute arbitrary PHP code via unspecified URL arguments, possibly related to a …
Impact
The Magic Tabs module 5.x before 5.x-1.1 for Drupal allows remote attackers to execute arbitrary PHP code via unspecified URL arguments, possibly related to a missing "whitelist of callbacks."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Magic Tabs Module | Version 5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://drupal.org/node/269321
- http://secunia.com/advisories/30632
- http://www.securityfocus.com/bid/29682
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43020
- http://drupal.org/node/269321
- http://secunia.com/advisories/30632
- http://www.securityfocus.com/bid/29682
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43020