Unrated severityNVD Advisory· Published Jul 3, 2008· Updated Apr 23, 2026
CVE-2008-2999
CVE-2008-2999
Description
Multiple SQL injection vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
15cpe:2.3:a:drupal:aggregation_module:3.0:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:drupal:aggregation_module:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:aggregation_module:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:aggregation_module:3.2:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:aggregation_module:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:aggregation_module:4.1:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:aggregation_module:4.2:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:aggregation_module:4.3:*:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:5.1_rev1.1:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:5.5.:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- drupal.org/node/269479nvdPatchVendor Advisory
- secunia.com/advisories/30618nvdVendor Advisory
- www.securityfocus.com/bid/29677nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/43010nvd
News mentions
0No linked articles in our index yet.