Every CVE Search/ Get API key

CVE-2005-1871

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public...

7.5 High

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."

Exploit likelihood

1.62%Up 0.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."

Record
CVE-2005-1871
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."

Record
CVE-2005-1871
Updated
2026-11-02
EUVDEUVD-2005-1873 No score

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."

Record
EUVD-2005-1873
Updated
2026-11-03
GitHub AdvisoriesGHSA-7pvf-533w-5xpj No score

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public...

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."

Record
GHSA-7pvf-533w-5xpj
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-1871 is a high vulnerability (CVSS 7.5) in Drupal, published June 7, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.62%, the 76th percentile. No source names a fixed version.

References

MoveEnter Open