>> Drupal Remote SQL Injection and Arbitrary Script Execution Vulnerabilities
Title : Drupal Remote SQL Injection and Arbitrary Script Execution Vulnerabilities VUPEN ID : VUPEN/ADV-2006-1975 CVE ID : CVE-2006-2742 - CVE-2006-2743
Rated as : Moderate Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2006-05-25
Technical Description
Multiple vulnerabilities have been identified in Drupal, which could be exploited by remote attackers to compromise a vulnerable server.
The first issue is due to input validation errors in the "database.mysql.inc", "database.pgsql.inc", and "database.mysqli.inc" scripts that do not validate the "count" and "from" variables, which could be exploited by malicious people to conduct SQL injection attacks.
The second flaw is due to an error where the "files" directory is accessible without requiring authentication, which could be exploited by attackers to execute arbitrary files.
