CVE-2007-0507: SQL Injection
SQL injection vulnerability in the Acidfree module for Drupal before 4.6.x-1.0, and before 4.7.x-1.0 in the 4.7 series, allows remote authenticated users with "create acidfree albums" privileges to execute arbitrary SQL commands via node titles.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0507?
CVE-2007-0507 is considered a high severity vulnerability due to its ability to allow remote authenticated users to execute arbitrary SQL commands.
How do I fix CVE-2007-0507?
To fix CVE-2007-0507, upgrade to Acidfree 4.6.x-1.0 or 4.7.x-1.0 or later versions.
Who is affected by CVE-2007-0507?
CVE-2007-0507 affects remote authenticated users of the Acidfree module in Drupal versions before 4.6.x-1.0 and before 4.7.x-1.0.
What types of attacks can be executed through CVE-2007-0507?
CVE-2007-0507 allows attackers to perform SQL injection attacks, leading to potential unauthorized database access or modification.
Is CVE-2007-0507 still a risk for current Drupal users?
CVE-2007-0507 poses a risk only for users still running affected versions of the Acidfree module in Drupal; those who have updated are not at risk.