Unrated severityNVD Advisory· Published Jan 9, 2007· Updated Jun 16, 2026

CVE-2007-0136

Description

Multiple cross-site scripting (XSS) vulnerabilities in Drupal before 4.6.11, and 4.7 before 4.7.5, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in the (1) filter and (2) system modules. NOTE: some of these details are obtained from third party information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Drupal/Drupal2 versions
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*range: >=4.6.0,<4.6.11
- (no CPE)range: <4.6.11, <4.7.5

Patches

Vulnerability mechanics

References

drupal.org/node/104233nvdPatchVendor Advisory
drupal.org/files/sa-2007-001/advisory.txtnvdVendor Advisory
marc.infonvdThird Party Advisory
www.securityfocus.com/archive/1/456054/100/100/threadednvdThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/31311nvdThird Party AdvisoryVDB Entry
osvdb.org/32139nvdBroken Link
osvdb.org/32140nvdBroken Link
www.vupen.com/english/advisories/2007/0050nvdNot Applicable

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000