high7.5
CVE-2008-4148
SQL injection vulnerability in the Mailhandler module 5.x before 5.x-1.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to execute arbitr…
Impact
SQL injection vulnerability in the Mailhandler module 5.x before 5.x-1.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to composing queries without using the Drupal database API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Mailhandler | through 5.x-1.3 through 6.x-1.3 Versions 5.x-1.0, 5.x-1.1, 5.x-1.2, 5.x-1.x-dev |
Weakness classification
References
- NVD record
- CVE.org record
- http://drupal.org/node/309769
- http://secunia.com/advisories/31877
- http://www.securityfocus.com/bid/31230
- http://www.vupen.com/english/advisories/2008/2616
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45216
- http://drupal.org/node/309769
- http://secunia.com/advisories/31877
- http://www.securityfocus.com/bid/31230
- http://www.vupen.com/english/advisories/2008/2616
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45216