Skip to contentDrupal vulnerabilities
Products
Show 46 moreShow less
Newest
- drupal project, project issue tracking module +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the (1) Project issue tracking 4.7.0...CVE-2007-05344.3 Medium
- drupal acidfreeSQL injection vulnerability in the Acidfree module for Drupal before 4.6.x-1.0, and before 4.7.x...CVE-2007-05076.0 Medium
- drupal project, project issue tracking module +1 moreThe project_issue_access function in the Project issue tracking 4.7.0 through 5.x before 20070123...CVE-2007-05066.0 Medium
- drupal project, project issue tracking module +1 moreUnrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before...CVE-2007-05058.5 High
- drupalMultiple cross-site scripting (XSS) vulnerabilities in Drupal before 4.6.11, and 4.7 before 4.7.5...CVE-2007-01364.3 Medium
- drupalUnspecified vulnerability in Drupal before 4.6.11, and 4.7 before 4.7.5, when MySQL is used,...CVE-2007-01243.5 Low
- drupal mysiteCross-site scripting (XSS) vulnerability in the MySite 4.7.x before 4.7.x-3.3 and 5.x before 5.x...CVE-2006-66476.8 Medium
- drupal project, project issue tracking +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Drupal (1) Project Issue Tracking 4.7.x-1...CVE-2006-66466.8 Medium
- drupal help tip moduleCross-site scripting (XSS) vulnerability in the Help Tip module before 4.7.x-1.0 for Drupal...CVE-2006-65316.8 Medium
- drupal help tip moduleSQL injection vulnerability in the Help Tip module before 4.7.x-1.0 for Drupal allows remote...CVE-2006-65307.5 High
- drupal chatroom moduleThe Chatroom Module before 4.7.x.-1.0 for Drupal displays private messages in a chatroom's last...CVE-2006-65297.5 High
- drupal chatroom moduleThe Chatroom Module before 4.7.x.-1.0 for Drupal broadcasts Chatroom visitors' session IDs to all...CVE-2006-65287.5 High
- drupal cvs management and trackerCross-site scripting (XSS) vulnerability in the CVS management/tracker 4.7.x-1.0, 4.7.x-2.0, and...CVE-2006-63866.8 Medium
- drupal extended trackerSQL injection vulnerability in Extended Tracker (xtracker) 4.7 before 1.5.2.1 for Drupal allows...CVE-2006-56087.5 High
- drupalDrupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allows form submissions to be redirected, which...CVE-2006-54772.6 Low
- drupalCross-site request forgery (CSRF) vulnerability in Drupal 4.6.x before 4.6.10 and 4.7.x before 4...CVE-2006-54767.5 High
- drupalMultiple cross-site scripting (XSS) vulnerabilities in the XML parser in Drupal 4.6.x before 4.6...CVE-2006-54756.8 Medium
- drupal site profile directory moduleCross-site scripting (XSS) vulnerability in the Drupal 4.6 Site Profile Directory (profile_pages...CVE-2006-49494.3 Medium
- drupal search keyword moduleCross-site scripting (XSS) vulnerability in the Drupal 4.7 Search Keywords module before 1.15...CVE-2006-49476.8 Medium
- drupal userreview moduleCross-site scripting (XSS) vulnerability in the Drupal 4.7 Userreview module before 1.19 2006/09...CVE-2006-48214.3 Medium
- drupal pubcookie moduleThe login redirection mechanism in the Drupal 4.7 Pubcookie module before 1.2.2.4 2006/09/06 and...CVE-2006-47177.5 High
- drupal pathauto moduleCross-site scripting (XSS) vulnerability in the Drupal 4.7 Pathauto module before pathauto_node...CVE-2006-46466.8 Medium
- drupal e-commerce moduleCross-site scripting (XSS) vulnerability in E-commerce 4.7 for Drupal before file.module 1.37.2.4...CVE-2006-43603.5 Low
- drupal easylinks moduleSQL injection vulnerability in Drupal Easylinks Module (easylinks.module) 4.7 before 1.5.2.1 2006...CVE-2006-43567.5 High
- drupal easylinks moduleCross-site scripting (XSS) vulnerability in Drupal Easylinks Module (easylinks.module) 4.7 before...CVE-2006-43552.6 Low
- drupal, drupal recipe module +1 moreCross-site scripting (XSS) vulnerability in the Recipe module (recipe.module) before 1.54 for...CVE-2006-41205.1 Medium
- drupal bibliography moduleCross-site scripting (XSS) vulnerability in Bibliography (biblio.module) 4.6 before revision 1.1...CVE-2006-41094.3 Medium
- drupal bibliography moduleSQL injection vulnerability in Bibliography (biblio.module) 4.6 before revision 1.1.1.1.4.11 and...CVE-2006-41087.5 High
- drupal job searchSQL injection vulnerability in the Job Search module (job.module) 4.6 before revision 1.3.2.1 in...CVE-2006-41077.5 High
- drupalCross-site scripting (XSS) vulnerability in user.module in Drupal 4.6 before 4.6.9, and 4.7...CVE-2006-4002Fix available4.3 Medium
- drupalCross-site scripting (XSS) vulnerability in the webform module in Drupal 4.6 before July 8, 2006...CVE-2006-35704.3 Medium
- drupal form mail moduleCRLF injection vulnerability in form_mail Drupal Module before 1.8.2.2 allows remote attackers to...CVE-2006-34737.5 High
- drupalCross-site scripting (XSS) vulnerability in the taxonomy module in Drupal 4.6.8 and 4.7.2 allows...CVE-2006-28332.6 Low
- drupalCross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x...CVE-2006-28322.6 Low
- drupalDrupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2, when running under certain Apache...CVE-2006-28317.5 High
- drupalDrupal 4.6.x before 4.6.7 and 4.7.0, when running on Apache with mod_mime, does not properly...CVE-2006-2743Public exploitEPSS 11.1%5.1 Medium
- drupalSQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to...CVE-2006-27427.5 High
- drupalCross-site scripting (XSS) vulnerability in the project module (project.module) in Drupal 4.5 and...CVE-2006-22604.3 Medium
- drupalSession fixation vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote...CVE-2006-12285.1 Medium
- drupalDrupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8, when menu.module is used to create a menu item,...CVE-2006-12274.6 Medium
- drupalCross-site scripting (XSS) vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8...CVE-2006-12264.3 Medium
- drupalCRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote...CVE-2006-12255.0 Medium
- drupal** DISPUTED ** Drupal allows remote attackers to conduct cross-site scripting (XSS) attacks via...CVE-2006-0070Disputed4.3 Medium
- drupalInterpretation conflict in file.inc in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allows...CVE-2005-39754.0 Medium
- drupalDrupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when running on PHP5, does not correctly...CVE-2005-39746.4 Medium
- drupalMultiple cross-site scripting (XSS) vulnerabilities in Drupal 4.5.0 through 4.5.5 and 4.6.0...CVE-2005-39734.3 Medium
- drupalUnknown vulnerability in Drupal 4.5.0 through 4.5.3, 4.6.0, and 4.6.1 allows remote attackers to...CVE-2005-2106Public exploit5.0 Medium
- drupal, gggeek phpxmlrpc, debian linux +2 more +4 moreEval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and...CVE-2005-1921Public exploitFix availableEPSS 79.1%7.5 High
- drupalUnknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public...CVE-2005-18717.5 High
- drupalCross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote...CVE-2005-06824.3 Medium
- Show moreLoading…