CVE-2007-0626

MediumCVSS 6.5/10Last modified Jun 16, 2026

Description

The comment_form_add_preview function in comment.module in Drupal before 4.7.6, and 5.x before 5.1, and vbDrupal, allows remote attackers with "post comments" privileges and access to multiple input filters to execute arbitrary code by previewing comments, which are not processed by "normal form validation routines."

Metrics

CVSS 2.0 6.5/10AV:N/AC:L/Au:S/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2007-01/0670.htmlBroken Link
http://drupal.org/node/113935Patch, Vendor Advisory
http://osvdb.org/32136Broken Link
http://secunia.com/advisories/23960Third Party Advisory
http://secunia.com/advisories/23990Third Party Advisory
http://www.securityfocus.com/bid/22306Third Party Advisory, VDB Entry
http://www.vbdrupal.org/forum/showthread.php?t=786Broken Link
http://www.vupen.com/english/advisories/2007/0406Third Party Advisory
http://www.vupen.com/english/advisories/2007/0415Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/31940Third Party Advisory, VDB Entry
http://archives.neohapsis.com/archives/bugtraq/2007-01/0670.htmlBroken Link
http://drupal.org/node/113935Patch, Vendor Advisory
http://osvdb.org/32136Broken Link
http://secunia.com/advisories/23960Third Party Advisory
http://secunia.com/advisories/23990Third Party Advisory
http://www.securityfocus.com/bid/22306Third Party Advisory, VDB Entry
http://www.vbdrupal.org/forum/showthread.php?t=786Broken Link
http://www.vupen.com/english/advisories/2007/0406Third Party Advisory
http://www.vupen.com/english/advisories/2007/0415Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/31940Third Party Advisory, VDB Entry

Timeline

Published: Jan 31, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-06274.9Michael Still gtalkbot before 1.2 places username and password arguments on the command line, which allows local users to obtain sensitive i CVE-2007-06284.3Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Access Manager 6.1, 6.2, 6 2005Q1 (6.3), and 7 2005Q4 (7.0) before 20 CVE-2007-06296.4The www_purgeList method in Plain Black WebGUI before 7.3.8 does not properly check user permissions, which allows attackers to delete unaut CVE-2007-06307.5Multiple SQL injection vulnerabilities in the generate_csv function in classes/class.news.php in X-dev xNews 1.3 and earlier allow remote at CVE-2007-06317.5SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL c CVE-2007-06327.5SQL injection vulnerability in artreplydelete.asp in ASP EDGE 1.3a and earlier allows remote attackers to execute arbitrary SQL commands via CVE-2007-06337.5PHP remote file inclusion vulnerability in include/themes/themefunc.php in MyNews 4.2.2 and earlier allows remote attackers to execute arbit CVE-2007-06347.8Unspecified vulnerability in Sun Solaris 10 before 20070130 allows remote attackers to cause a denial of service (system crash) via certain CVE-2007-06357.5Multiple PHP remote file inclusion vulnerabilities in EncapsCMS 0.3.6 allow remote attackers to execute arbitrary PHP code via a URL in the CVE-2007-06362.1Unspecified vulnerability in inotify before 0.3.5 has unknown impact and attack vectors, related to "access rights to watched files."CVE-2007-06377.5Directory traversal vulnerability in zd_numer.php in Galeria Zdjec 3.0 and earlier allows remote attackers to include and execute arbitrary CVE-2007-06385.0show.php in Vlad Alexa Mancini PHPFootball 1.6 allows remote attackers to obtain sensitive information (database contents) via a % (percent)