CVE-2007-5593

no score yetEPSS 3.8%

install.php in Drupal 5.x before 5.3, when the configured database server is not reachable, allows remote attackers to execute arbitrary code via vectors that cause settings.php to be modified.

EPSS: 3.8% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2007-10-19
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

drupal:drupal
fedoraproject:fedora

References

http://drupal.org/files/sa-2007-025/SA-2007-025-5.2.patch
http://drupal.org/node/184316
http://osvdb.org/39648
http://secunia.com/advisories/27290
http://secunia.com/advisories/27352

Check your stack JSON