CVE-2006-4108

Published: Aug 14, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in Bibliography (biblio.module) 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected (3)

Products: Drupal: Bibliography Module

Drupal

1 product

Bibliography Module

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Drupal Bibliography Module	Up to 4.5
Drupal Bibliography Module	Up to 4.6_rev1.1.1.1.4.10
Drupal Bibliography Module	Up to 4.7_rev1.13.2.4

References (10)

http://drupal.org/node/77756

Source: cve@mitre.org

http://secunia.com/advisories/21435

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/19441

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3227

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/28296

Source: cve@mitre.org

http://drupal.org/node/77756