← Database

CVE-2008-2772

HIGH CVSS: 7.5 Published: 2008-06-18 Modified: 2026-06-16

Description

The Magic Tabs module 5.x before 5.x-1.1 for Drupal allows remote attackers to execute arbitrary PHP code via unspecified URL arguments, possibly related to a missing "whitelist of callbacks."

Affected Platforms

Drupal Magic Tabs Module

Weakness Type

CWE-94

References