Drupal Database Administration Module vulnerabilities

2 CVEs affecting Drupal Database Administration Module, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-2160, published 2007-04-22.

More from Drupal.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-2160, published 2007-04-22. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities in the Database Administration (dba) module 4.6.x-*, and before 4.7.x-1.2 in the 4.7.x-1.* series, for Drupal allow remote attackers to…
• CVE-2007-2159, published 2007-04-22. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the Database Administration (dba) module 4.6.x-*, and before 4.7.x-1.2 in the 4.7.x-1.* series, for Drupal allow remote attackers to inject…