Vulnerabilities > Drupal > Taxonomy Autotagger Module

DATE CVE VULNERABILITY TITLE RISK
2008-07-09 CVE-2008-3092 SQL Injection vulnerability in Drupal Taxonomy Autotagger Module 5
SQL injection vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, with create or edit post permissions, to execute arbitrary SQL commands via unspecified vectors.
network
low complexity
drupal CWE-89
6.5
6.5
2008-07-09 CVE-2008-3091 Cross-Site Scripting vulnerability in Drupal Taxonomy Autotagger Module 5
Cross-site scripting (XSS) vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, with create or edit post permissions, to inject arbitrary web script or HTML via unspecified vectors.
network
drupal CWE-79
3.5
3.5