Approved changes feed: RSS · Atom

cpe:2.3:a:drupal:user_karma_module:5.x-1.6:*:*:*:*:*:*:*

part: a version: 5.x-1.6 update: *

VendorDrupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de)
ProductUser Karma Module (da3d78ea-da6c-5597-8cc1-fa8cd1644e00)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-6276 vulnerable 2026-06-08 04:50:54.729211 Details available
Multiple SQL injection vulnerabilities in the User Karma module 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1, a module for Drupal, allow remote authenticated administrators to execute arbitrary SQL commands via (1) a content type or (2) a voting API value.
Published: 2009-02-25T23:00:00.000Z
Updated: 2024-08-07T11:27:35.084Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6275 vulnerable 2026-06-08 04:50:54.725957 Details available
Cross-site scripting (XSS) vulnerability in the User Karma module 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified messages.
Published: 2009-02-25T23:00:00.000Z
Updated: 2024-08-07T11:27:35.029Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.