The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Multiple SQL injection vulnerabilities in Drupal and vbDrupal 4.7.x before 4.7.9 and 5.x before 5.4 allow remote attackers to execute arbitrary SQL commands via modules that pass input to the taxonomy_select_nodes function, as demonstrated by the (1) taxonomy_menu, (2) ajaxLoader, and (3) ubrowser contributed modules.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Drupal | — | Upgrade to Drupal version 5.4Upgrade to Drupal version 4.7.9 | Aug 2, 2017 | Dec 10, 2007 |
| Freebsd | — | Upgrade drupal4Upgrade drupal5 | Dec 10, 2025 | Dec 12, 2007 |
| Ubuntu | — | Upgrade drupalUpgrade drupal5 | Nov 19, 2024 | Dec 10, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub