OSVDB ID: 32136

Title: Drupal Comment Module comment_form_add_preview Function Arbitrary Code Execution

Info

Disclosure

Jan 29, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Unknown or Incomplete

Classification

Impact: Loss of Integrity
Disclosure: Vendor Verified

Solution

Unknown or Incomplete

Products

Unknown or Incomplete

References

CVE ID: 2007-0626 (see also: NVD)
Bugtraq ID: 22306
Secunia Advisory ID: 23960 23990
ISS X-Force ID: 31940
VUPEN Advisory: ADV-2007-0406 ADV-2007-0415
Keyword: DRUPAL-SA-2007-005
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-01/0670.html
Vendor Specific News/Changelog Entry: http://drupal.org/node/113935
http://www.vbdrupal.org/forum/showthread.php?t=786

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/32136