CVE-2007-0626

The comment_form_add_preview function in comment.module in Drupal before 4.7.6, and 5.x before 5.1, and vbDrupal, allows remote attackers with "post comments"…

published January 31, 2007

CVSS
—
EPSS
3%
Percentile
88.6
In the wild
Unconfirmed
What it is

The comment_form_add_preview function in comment.module in Drupal before 4.7.6, and 5.x before 5.1, and vbDrupal, allows remote attackers with "post comments" privileges and access to multiple input filters to execute arbitrary code by previewing comments, which are not processed by "normal form validation routines."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03375 · 88.6th percentile
Published
2007-01-31T18:00Z
EPSS history
Timeline
  • 31 JAN 18:00Z
    The comment_form_add_preview function in comment.module in Drupal before 4.7.6, and 5.x before 5.1, and vbDrupal, allows remote attackers with "post comments"…
    cvelistv5