|
Drupal User Karma Module Cross Site Scripting and Multiple SQL Injection Vulnerabilities
The 'User Karma' module for Drupal is prone to multiple SQL-injection vulnerabilities and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. These issues affect the following: 'User Karma' module for Drupal 5.x prior to 5.x-1.13 'User Karma' module for Drupal 6.x prior to 6.x-1.0-beta1 |
|
 Privacy Statement |
