Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

drupal drupal 5.x vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-6275
Cross-site scripting (XSS) vulnerability in the User Karma module 5.x prior to 5.x-1.13 and 6.x prior to 6.x-1.0-beta1, a module for Drupal, allows remote malicious users to inject arbitrary web script or HTML via unspecified messages.
Drupal User Karma Module 5.x-1.10Drupal User Karma ModuleDrupal User Karma Module 5.x-1.9Drupal User Karma Module 5.x-1.xdevDrupal User Karma Module 5.x-1.2Drupal User Karma Module 5.x-1.3Drupal User Karma Module 5.x-1.4Drupal User Karma Module 5.x-1.5Drupal User Karma Module 5.x-1.6Drupal User Karma Module 5.x-1.1Drupal User Karma Module 5.x-1.7Drupal User Karma Module 5.x-1.8
NA
CVE-2008-6276
Multiple SQL injection vulnerabilities in the User Karma module 5.x prior to 5.x-1.13 and 6.x prior to 6.x-1.0-beta1, a module for Drupal, allow remote authenticated administrators to execute arbitrary SQL commands via (1) a content type or (2) a voting API value.
Drupal User Karma Module 5.x-1.10Drupal User Karma Module 5.x-1.2Drupal User Karma Module 5.x-1.9Drupal User Karma Module 5.x-1.xdevDrupal User Karma Module 5.x-1.3Drupal User Karma Module 5.x-1.4Drupal User Karma Module 6.x-1.xdevDrupal User Karma Module 5.x-1.12Drupal User Karma Module 5.x-1.5Drupal User Karma Module 5.x-1.6Drupal User Karma Module 5.x-1.1Drupal User Karma Module 5.x-1.7Drupal User Karma Module 5.x-1.8
NA
CVE-2009-1823
Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 5.x prior to 5.x-4.7 and 6.x prior to 6.x-1.7, a module for Drupal, allows remote malicious users to inject arbitrary web script or HTML by modifying a document head, before the Co...
Drupal Print 5.x-2.2Drupal Print 5.x-2.x-devDrupal Print 5.x-3.6Drupal Print 5.x-3.7Drupal Print 6.x-1.1Drupal Print 6.x-1.2Drupal Print 5.x-4.3Drupal Print 5.x-4.4Drupal Print 5.x-1.0Drupal Print 5.x-1.1Drupal Print 5.x-1.2Drupal Print 5.x-3.2Drupal Print 5.x-3.3Drupal Print 6.x-1.0-rc4Drupal Print 6.x-1.0-rc5Drupal Print 6.x-1.6Drupal Print 5.x-4.0Drupal Print 5.x-1.x-devDrupal Print 5.x-2.1Drupal Print 5.x-3.4Drupal Print 5.x-3.5Drupal Print 6.x-1.0-rc8
NA
CVE-2009-1037
Unspecified vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions" module 5.x prior to 5.x-4.4 and 6.x prior to 6.x-1.4, a module for Drupal, allows remote malicious users to send unlimited spam messages via unknown vectors related to the f...
Drupal Print 5.x-3.7Drupal Print 5.x-3.6Drupal Print 5.x-4.xDrupal Print 5.x-4.0Drupal Print 5.xDrupal Print 5.x-4.1Drupal Print 5.x-4.2Drupal Print 5.x-4.3Drupal Print 5.x-2.1Drupal Print 5.x-2.2Drupal Print 5.x-3.0Drupal Print 5.x-1.0Drupal Print 6.x-1.2Drupal Print 6.x-1.3Drupal Print 6.x-1.0-rc8Drupal Print 6.x-1.0-rc9Drupal Print 6.x-1.0Drupal Print 5.x-3.5Drupal Print 5.x-3.3Drupal Print 5.x-3.2Drupal Print 5.x-1.x-devDrupal Print 5.x-2.x-dev
NA
CVE-2008-4531
SQL injection vulnerability in Brilliant Gallery 5.x prior to 5.x-4.2, a module for Drupal, allows remote malicious users to execute arbitrary SQL commands via unspecified vectors, related to queries. NOTE: this might be the same issue as CVE-2008-4338.
Drupal Brilliant Gallery 5.x-3.2Drupal Brilliant Gallery 5.x-3.1Drupal Brilliant Gallery 5.x-2.11Drupal Brilliant Gallery 5.x-2.10Drupal Brilliant Gallery 5.x-2.3Drupal Brilliant Gallery 5.x-2.2Drupal Brilliant GalleryDrupal Brilliant Gallery 5.x-2.16Drupal Brilliant Gallery 5.x-2.15Drupal Brilliant Gallery 5.x-2.7Drupal Brilliant Gallery 5.x-2.6Drupal Brilliant Gallery 5.x-1.1Drupal Brilliant Gallery 5.x-1.0Drupal Brilliant Gallery 5.x-3.0Drupal Brilliant Gallery 5.x-2.17Drupal Brilliant Gallery 5.x-2.9Drupal Brilliant Gallery 5.x-2.8Drupal Brilliant Gallery 5.x-2.1Drupal Brilliant Gallery 5.x-1.2Drupal Brilliant Gallery 5.x-4.0Drupal Brilliant Gallery 5.x-3.3Drupal Brilliant Gallery 5.x-2.14
NA
CVE-2008-4530
Cross-site scripting (XSS) vulnerability in Brilliant Gallery 5.x prior to 5.x-4.2, a module for Drupal, allows remote authenticated users with permissions to inject arbitrary web script or HTML via unspecified vectors related to posting of answers.
Drupal Brilliant Gallery 5.x-2.17Drupal Brilliant Gallery 5.x-2.16Drupal Brilliant Gallery 5.x-2.9Drupal Brilliant Gallery 5.x-2.8Drupal Brilliant Gallery 5.x-2.7Drupal Brilliant Gallery 5.x-1.2Drupal Brilliant Gallery 5.x-1.1Drupal Brilliant GalleryDrupal Brilliant Gallery 5.x-4.0Drupal Brilliant Gallery 5.x-2.15Drupal Brilliant Gallery 5.x-2.14Drupal Brilliant Gallery 5.x-2.6Drupal Brilliant Gallery 5.x-2.5Drupal Brilliant Gallery 5.x-1.0Drupal Brilliant Gallery 5.x-3.3Drupal Brilliant Gallery 5.x-3.2Drupal Brilliant Gallery 5.x-2.13Drupal Brilliant Gallery 5.x-2.12Drupal Brilliant Gallery 5.x-2.4Drupal Brilliant Gallery 5.x-2.3Drupal Brilliant Gallery 5.x-3.1Drupal Brilliant Gallery 5.x-3.0
NA
CVE-2009-1343
Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 5.x prior to 5.x-4.5 and 6.x prior to 6.x-1.5, a module for Drupal, allows remote malicious users to inject arbitrary web script or HTML via content titles.
Drupal Print 5.x-2.1Drupal Print 5.x-2.2Drupal Print 5.x-3.4Drupal Print 5.x-3.3Drupal Print 5.x-4.3Drupal Print 5.x-4.1Drupal Print 5.x-3.2Drupal Print 6.x-1.4Drupal Print 6.x-1.x-devDrupal Print 5.x-3.0Drupal Print 5.x-1.x-devDrupal Print 5.x-3.6Drupal Print 5.x-3.5Drupal Print 5.x-4.xDrupal Print 6.x-1.0-rc5Drupal Print 6.x-1.0-rc9Drupal Print 6.x-1.1Drupal Print 5.x-2.x-devDrupal Print 5.x-1.1Drupal Print 5.xDrupal Print 5.x-3.1Drupal Print 6.x-1.0-rc3
NA
CVE-2009-1047
Cross-site scripting (XSS) vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions" module 5.x prior to 5.x-4.4 and 6.x prior to 6.x-1.4, a module for Drupal, allows remote malicious users to inject arbitrary web script or HTML via vectors in...
Drupal DrupalDrupal Print 5.x-4.xDrupal Print 5.x-4.0Drupal Print 5.x-3.0Drupal Print 6.x-1.x-devDrupal Print 5.x-1.1Drupal Print 6.x-1.4Drupal Print 6.x-1.0-rc4Drupal Print 6.x-1.0-rc5Drupal Print 5.xDrupal Print 5.x-4.3Drupal Print 5.x-3.5Drupal Print 5.x-3.4Drupal Print 5.x-2.x-devDrupal Print 5.x-1.2Drupal Print 6.x-1.1Drupal Print 6.x-1.0Drupal Print 5.x-4.2Drupal Print 5.x-4.1Drupal Print 5.x-3.2Drupal Print 5.x-3.3Drupal Print 5.x-3.1
NA
CVE-2009-2074
Cross-site scripting (XSS) vulnerability in Nodequeue 5.x prior to 5.x-2.7 and 6.x prior to 6.x-2.2, a module for Drupal, allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via vocabulary names.
Drupal Nodequeue 5.x-2.0-rcDrupal Nodequeue 5.x-2.0 BetaDrupal Nodequeue 5.x-2.0 Rc1Drupal Nodequeue 5.x-2.1Drupal Nodequeue 5.x-2.2Drupal Nodequeue 5.x-2.3Drupal Nodequeue 5.x-2.4Drupal Nodequeue 5.x-2.5Drupal Nodequeue 5.x-2.6Drupal Nodequeue 6.x-2.0Drupal Nodequeue 6.x-2.0-rc1Drupal Nodequeue 6.x-2.0-rc2Drupal Nodequeue 6.x-2.1
NA
CVE-2008-1794
Multiple cross-site scripting (XSS) vulnerabilities in the Webform Drupal module 5.x prior to 5.x-1.10, 5.x-2.x prior to 5.x-2.0-beta3, and 6.x prior to 6.x-1.0-beta3 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Drupal Webform Module 5.x-1.0Drupal Webform Module 5.x-1.9Drupal Webform Module 6.x-1.x-devDrupal Webform Module 5.x-1.2Drupal Webform Module 5.x-1.6Drupal Webform Module 5.x-1.5Drupal Webform Module 5.x-1.3Drupal Webform Module 5.x-1.4Drupal Webform Module 5.x-1.1Drupal Webform Module 5.x-2.0Drupal Webform Module 5.x-1.8Drupal Webform Module 5.x-1.7
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook