Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

drewish imagecache 5.x-1.5 vulnerabilities and exploits

(subscribe to this query)
312
VMScore
CVE-2009-3206
Multiple cross-site scripting (XSS) vulnerabilities in the ImageCache module 5.x prior to 5.x-2.5 and 6.x prior to 6.x-2.0-beta10, a module for Drupal, allow remote authenticated users, with "administer imagecache" permissions, to inject arbitrary web script or HTML via...
Drewish Imagecache 5.x-1.6Drewish Imagecache 5.x-2.1Drewish Imagecache 6.x-2.0Drewish Imagecache 5.x-1.xDrewish Imagecache 5.x-2.0Drewish Imagecache 5.x-1.0Drewish Imagecache 5.x-1.7Drewish Imagecache 5.x-2.3Drewish Imagecache 5.x-2.2Drewish Imagecache 5.x-2.xDrewish Imagecache 5.x-1.3Drewish Imagecache 6.x-1.0Drewish Imagecache 5.x-1.4Drewish Imagecache 5.x-1.1Drewish Imagecache 5.x-1.2Drewish Imagecache 5.x-2.4Drewish Imagecache 6.x-2.x-devDrewish Imagecache 5.x-1.5
605
VMScore
CVE-2009-3207
The ImageCache module 5.x prior to 5.x-2.5 and 6.x prior to 6.x-2.0-beta10, a module for Drupal, when the private file system is used, does not properly perform access control for derivative images, which allows remote malicious users to view arbitrary images via a request that s...
Drewish Imagecache 5.x-2.1Drewish Imagecache 5.x-1.7Drewish Imagecache 6.x-2.0Drewish Imagecache 5.x-2.xDrewish Imagecache 5.x-1.1Drewish Imagecache 5.x-2.3Drewish Imagecache 5.x-2.2Drewish Imagecache 5.x-2.0Drewish Imagecache 5.x-1.5Drewish Imagecache 5.x-1.6Drewish Imagecache 6.x-1.0Drewish Imagecache 5.x-1.xDrewish Imagecache 5.x-1.0Drewish Imagecache 5.x-1.2Drewish Imagecache 5.x-1.3Drewish Imagecache 5.x-2.4Drewish Imagecache 6.x-2.x-devDrewish Imagecache 5.x-1.4
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook