high7.5
CVE-2010-3423
SQL injection vulnerability in the Yr Weatherdata module for Drupal 6.x before 6.x-1.6 allows remote attackers to execute arbitrary SQL commands via the sortin…
Impact
SQL injection vulnerability in the Yr Weatherdata module for Drupal 6.x before 6.x-1.6 allows remote attackers to execute arbitrary SQL commands via the sorting method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freka | Yr Verdata | Versions 6.x-1.0, 6.x-1.1, 6.x-1.4, 6.x-1.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://drupal.org/node/606290
- http://drupal.org/node/905686
- http://secunia.com/advisories/41385
- http://www.osvdb.org/67918
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61673
- http://drupal.org/node/606290
- http://drupal.org/node/905686
- http://secunia.com/advisories/41385
- http://www.osvdb.org/67918
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61673