CVE-2009-1505

SQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote authenticated users, with News Page nodes create and edit…

published May 1, 2009

CVSS
—
EPSS
1%
Percentile
64.6
In the wild
Unconfirmed
What it is

SQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote authenticated users, with News Page nodes create and edit privileges, to execute arbitrary SQL commands via the Include Words (aka keywords) field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01070 · 64.6th percentile
Published
2009-05-01T17:00Z
EPSS history
Timeline
  • 01 MAY 17:00Z
    SQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote authenticated users, with News Page nodes create and edit…
    cvelistv5