cpe:/a:drupal:user_karma_module:5.x-1.1 cpe:/a:drupal:user_karma_module:5.x-1.2 cpe:/a:drupal:user_karma_module:5.x-1.3 cpe:/a:drupal:user_karma_module:5.x-1.4 cpe:/a:drupal:user_karma_module:5.x-1.5 cpe:/a:drupal:user_karma_module:5.x-1.6 cpe:/a:drupal:user_karma_module:5.x-1.7 cpe:/a:drupal:user_karma_module:5.x-1.8 cpe:/a:drupal:user_karma_module:5.x-1.9 cpe:/a:drupal:user_karma_module:5.x-1.10 cpe:/a:drupal:user_karma_module:5.x-1.12 cpe:/a:drupal:user_karma_module:5.x-1.xdev cpe:/a:drupal:user_karma_module:6.x-1.xdev CVE-2008-6276 2009-02-25T18:30:00.657-05:00 2017-08-16T21:29:11.240-04:00 6.5 NETWORK LOW SINGLE_INSTANCE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2009-02-26T07:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 32491 SECUNIA 32904 OSVDB 50207 CONFIRM http://drupal.org/node/339553 XF userkarma-content-voting-sql-injection(46946) Multiple SQL injection vulnerabilities in the User Karma module 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1, a module for Drupal, allow remote authenticated administrators to execute arbitrary SQL commands via (1) a content type or (2) a voting API value.