Vulnerability Details CVE-2008-2850
SQL injection vulnerability in the TrailScout module 5.x before 5.x-1.4 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified cookies, related to improper use of the Drupal database API.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.7%
CVSS Severity
CVSS v2 Score 7.5
References
- http://drupal.org/node/272191
- http://secunia.com/advisories/30764
- http://www.securityfocus.com/bid/29807
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43169
- http://drupal.org/node/272191
- http://secunia.com/advisories/30764
- http://www.securityfocus.com/bid/29807
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43169
Products affected by CVE-2008-2850
-
cpe:2.3:a:drupal:trailscout_module:5.x
-
cpe:2.3:a:drupal:trailscout_module:5.x_1.0
-
cpe:2.3:a:drupal:trailscout_module:5.x_1.1
-
cpe:2.3:a:drupal:trailscout_module:5.x_1.2
-
cpe:2.3:a:drupal:trailscout_module:5.x_1.3