CVE-2007-5593

Description

install.php in Drupal 5.x before 5.3, when the configured database server is not reachable, allows remote attackers to execute arbitrary code via vectors that cause settings.php to be modified.

References

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00328.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/37265

http://www.securityfocus.com/bid/26119

http://secunia.com/advisories/27352

http://secunia.com/advisories/27290

http://drupal.org/node/184316

http://drupal.org/files/sa-2007-025/SA-2007-025-5.2.patch

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3