CVE-2009-1505

Impact

SQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote authenticated users, with News Page nodes create and edit privileges, to execute arbitrary SQL commands via the Include Words (aka keywords) field.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://drupal.org/node/449014
• http://osvdb.org/54151
• http://secunia.com/advisories/34954
• http://www.securityfocus.com/bid/34777
• http://www.vupen.com/english/advisories/2009/1214
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50248
• http://drupal.org/node/449014
• http://osvdb.org/54151
• http://secunia.com/advisories/34954
• http://www.securityfocus.com/bid/34777
• http://www.vupen.com/english/advisories/2009/1214
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50248