FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

drupal -- SQL injection vulnerability

Affected packages
drupal5 < 5.4
drupal4 < 4.7.9


VuXML ID fa708908-a8c7-11dc-b41d-000fb5066b20
Discovery 2007-12-05
Entry 2007-12-12

The Drupal Project reports:

The function taxonomy_select_nodes() directly injects variables into SQL queries instead of using placeholders. While taxonomy module itself validates the input passed to taxonomy_select_nodes(), this is a weakness in Drupal core. Several contributed modules, such as taxonomy_menu, ajaxLoader, and ubrowser, directly pass user input to taxonomy_select_nodes(), enabling SQL injection attacks by anonymous users.


CVE Name CVE-2007-6299