Unscored severity · published Apr 22, 2007
CVE-2007-2159
Multiple cross-site scripting (XSS) vulnerabilities in the Database Administration (dba) module 4.6.x-*, and before 4.7.x-1.2 in the 4.7.x-1.* series, for Drupal allow remote…
–
CVSS
1%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Database Administration (dba) module 4.6.x-*, and before 4.7.x-1.2 in the 4.7.x-1.* series, for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors relating to (1) direct display of data from the database and (2) other portions of the user interface.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DA
Database Administration Module · Drupal
4.6; 4.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2159
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2159
Patch
http://drupal.org/node/135549
osvdb.org
http://osvdb.org/34961
Patch
http://secunia.com/advisories/24848
www.vupen.com
http://www.vupen.com/english/advisories/2007/1360
More from Database Administration Module
–
CVE-2007-2160
Multiple cross-site request forgery (CSRF) vulnerabilities in the Database Administration (dba) module 4.6.x-*, and before 4.7.x-1.2 in the 4.7.x-1.* series, for Drupal allow…