Drupal: >> Brilliant Gallery >> 5.x-2.12 Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows remote authenticated users with permissions to inject arbitrary web script or HTML via unspecified vectors related to posting of answers.
CVSS Score
3.5
EPSS Score
0.002
Published
2008-10-09
SQL injection vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to queries. NOTE: this might be the same issue as CVE-2008-4338.
CVSS Score
7.5
EPSS Score
0.004
Published
2008-10-09