CVE-2008-10004
Medium
Description
A vulnerability was found in Email Registration 5.x-2.1 on Drupal. It has been declared as critical. This vulnerability affects the function email_registration_user of the file email_registration.module. The manipulation of the argument namenew leads to sql injection. The attack can be initiated remotely. Upgrading to version 6.x-1.0 is able to address this issue. The patch is identified as 126c141b7db038c778a2dc931d38766aad8d1112. It is recommended to upgrade the affected component. VDB-222334 is the identifier assigned to this vulnerability.
SeverityMedium
CVSS6.3
Exploit probability—
ProductEmail Registration
PublishedMar 6, 2023
First seenMar 6, 2023
Weakness typeCWE-89SQL injection
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| email_registration_project email_registration | 5.x-2.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.