Skip to contentDrupal vulnerabilities
Products
Show 46 moreShow less
Newest
- drupal ajax checklistMultiple SQL injection vulnerabilities in the ajax_checklist_save function in the Ajax Checklist...CVE-2008-5998Public exploit6.0 Medium
- drupalDrupal Node Validation Bypass in the node module APICVE-2008-4793Fix available7.5 High
- drupalThe core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 does not properly validate...CVE-2008-47926.0 Medium
- drupalThe user module in Drupal 5.x before 5.11 and 6.x before 6.5 might allow remote authenticated...CVE-2008-47916.0 Medium
- drupalThe core upload module in Drupal 5.x before 5.11 allows remote authenticated users to bypass...CVE-2008-47906.0 Medium
- drupalThe validation functionality in the core upload module in Drupal 6.x before 6.5 allows remote...CVE-2008-47896.0 Medium
- drupal stock moduleCross-site scripting (XSS) vulnerability in the stock quotes page in Stock 6.x before 6.x-1.0, a...CVE-2008-47104.3 Medium
- drupal node cloneSQL injection vulnerability in Node Vote 5.x before 5.x-1.1 and 6.x before 6.x-1.0, a module for...CVE-2008-46336.0 Medium
- drupal shindig-integratorUnspecified vulnerability in Shindig-Integrator 5.x, a module for Drupal, has unspecified impact...CVE-2008-45987.5 High
- drupal shindig-integratorShindig-Integrator 5.x, a module for Drupal, does not properly restrict generated page access,...CVE-2008-45977.5 High
- drupal shindig-integratorCross-site scripting (XSS) vulnerability in Shindig-Integrator 5.x, a module for Drupal, allows...CVE-2008-45964.3 Medium
- drupal brilliant gallerySQL injection vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows...CVE-2008-45317.5 High
- drupal brilliant galleryCross-site scripting (XSS) vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for...CVE-2008-45303.5 Low
- drupalDrupal, probably 5.10 and 6.4, does not set the secure flag for the session cookie in an https...CVE-2008-36615.0 Medium
- drupal talkThe Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Drupal, does not perform...CVE-2008-41535.0 Medium
- drupal talkCross-site scripting (XSS) vulnerability in the Talk module 5.x before 5.x-1.3 and 6.x before 6.x...CVE-2008-41523.5 Low
- drupal link to usCross-site scripting (XSS) vulnerability in the Greg Holsclaw Link to Us module 5.x before 5.x-1...CVE-2008-41494.3 Medium
- drupal mailhandlerSQL injection vulnerability in the Mailhandler module 5.x before 5.x-1.4 and 6.x before 6.x-1.4,...CVE-2008-41487.5 High
- drupal mailsaveCross-site scripting (XSS) vulnerability in the Mailsave module 5.x before 5.x-3.3 and 6.x before...CVE-2008-41474.3 Medium
- drupal, drupal upload module +1 moreThe Upload module in Drupal 6.x before 6.4 allows remote authenticated users to edit nodes,...CVE-2008-37455.5 Medium
- drupalMultiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.10 and 6.x...CVE-2008-37445.8 Medium
- drupalMultiple cross-site request forgery (CSRF) vulnerabilities in forms in Drupal 6.x before 6.4...CVE-2008-37435.8 Medium
- drupalUnrestricted file upload vulnerability in the BlogAPI module in Drupal 5.x before 5.10 and 6.x...CVE-2008-37426.5 Medium
- drupalThe private filesystem in Drupal 5.x before 5.10 and 6.x before 6.4 trusts the MIME type sent by...CVE-2008-37413.5 Low
- drupalCross-site scripting (XSS) vulnerability in the output filter in Drupal 5.x before 5.10 and 6.x...CVE-2008-37404.3 Medium
- drupal suggested terms moduleCross-site scripting (XSS) vulnerability in the Suggested Terms module 5.x before 5.x-1.2 for...CVE-2008-35004.3 Medium
- drupal, fedoraproject fedora +1 moreSQL injection vulnerability in the Schema API in Drupal 6.x before 6.3 allows remote attackers to...CVE-2008-32237.5 High
- drupal, fedoraproject fedora +1 moreSession fixation vulnerability in Drupal 5.x before 5.9 and 6.x before 6.3, when contributed...CVE-2008-32225.8 Medium
- drupal, fedoraproject fedora +1 moreCross-site request forgery (CSRF) vulnerability in Drupal 6.x before 6.3 allows remote attackers...CVE-2008-32214.3 Medium
- drupal, fedoraproject fedora +1 moreCross-site request forgery (CSRF) vulnerability in Drupal 5.x before 5.8 and 6.x before 6.3...CVE-2008-32204.3 Medium
- drupal, fedoraproject fedora +1 moreThe Drupal filter_xss_admin function in 5.x before 5.8 and 6.x before 6.3 does not "prevent use...CVE-2008-32194.3 Medium
- drupal, fedoraproject fedora +1 moreDrupal vulnerable to Cross-site ScriptingCVE-2008-3218Fix available4.3 Medium
- drupal tinytax taxonomy block moduleCross-site scripting (XSS) vulnerability in the Tinytax module (aka Tinytax taxonomy block) 5.x...CVE-2008-30973.5 Low
- drupal outline designer moduleThe Outline Designer module 5.x before 5.x-1.4 for Drupal changes each content reader's...CVE-2008-30966.5 Medium
- drupal organic groups moduleCross-site scripting (XSS) vulnerability in the Organic Groups (OG) module 5.x before 5.x-7.3 and...CVE-2008-30953.5 Low
- drupal taxonomy autotagger moduleSQL injection vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal...CVE-2008-30926.5 Medium
- drupal taxonomy autotagger moduleCross-site scripting (XSS) vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for...CVE-2008-30913.5 Low
- drupal aggregation moduleThe Aggregation module 5.x before 5.x-4.4 for Drupal allows remote attackers to upload files with...CVE-2008-30019.3 High
- drupal aggregation moduleThe Aggregation module 5.x before 5.x-4.4 for Drupal, when node access modules are used, does not...CVE-2008-30006.8 Medium
- drupal aggregation module, drupal +1 moreMultiple SQL injection vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal...CVE-2008-29997.5 High
- drupal aggregation moduleMultiple cross-site scripting (XSS) vulnerabilities in the Aggregation module 5.x before 5.x-4.4...CVE-2008-29984.3 Medium
- drupal trailscout moduleSQL injection vulnerability in the TrailScout module 5.x before 5.x-1.4 for Drupal allows remote...CVE-2008-28507.5 High
- drupal trailscout moduleCross-site scripting (XSS) vulnerability in the TrailScout module 5.x before 5.x-1.4 for Drupal...CVE-2008-28493.5 Low
- drupal taxonomy image moduleCross-site scripting (XSS) vulnerability in the Taxonomy Image module 5.x before 5.x-1.3 and 6.x...CVE-2008-27734.3 Medium
- drupal magic tabs moduleThe Magic Tabs module 5.x before 5.x-1.1 for Drupal allows remote attackers to execute arbitrary...CVE-2008-27727.5 High
- drupal, drupal node hierarchy module +1 moreThe Node Hierarchy module 5.x before 5.x-1.1 and 6.x before 6.x-1.0 for Drupal does not properly...CVE-2008-27715.0 Medium
- drupal e-publishCross-site scripting (XSS) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0...CVE-2008-19804.3 Medium
- drupal ubercart moduleCross-site scripting (XSS) vulnerability in the Ubercart 5.x before 5.x-1.0 rc3 module for Drupal...CVE-2008-19783.5 Low
- drupal ubercart moduleMultiple cross-site scripting (XSS) vulnerabilities in the Ubercart 5.x before 5.x-1.0-rc1 module...CVE-2008-19164.3 Medium
- drupal webform moduleMultiple cross-site scripting (XSS) vulnerabilities in the Webform Drupal module 5.x before 5.x-1...CVE-2008-17944.3 Medium
- Show moreLoading…