Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

drupal project issue tracking module 5 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2008-0576
Cross-site scripting (XSS) vulnerability in the Project Issue Tracking module 5.x-2.x-dev prior to 20080130 in the 5.x-2.x series, 5.x-1.2 and previous versions in the 5.x-1.x series, 4.7.x-2.6 and previous versions in the 4.7.x-2.x series, and 4.7.x-1.6 and previous versions in ...
Drupal Project Issue Tracking Module 5Drupal Project Issue Tracking Module 4.7
8.5
CVSSv2
CVE-2007-0505
Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 up to and including 5.x prior to 20070123, a module for Drupal, allows remote authenticated users to execute arbitrary code by attaching a file with executable or multiple extensions to a project issue.
Drupal Project 4.7 1.1Drupal Project 4.7 2.1Drupal Project 4.6 1.1Drupal Project 4.7Drupal Project Issue Tracking Module 5.0Drupal Project 5.0Drupal Project Issue Tracking Module 4.7Drupal Project 4.6Drupal Project Issue Tracking Module 4.7 1.1Drupal Project Issue Tracking Module 4.7 2.1
6
CVSSv2
CVE-2007-0506
The project_issue_access function in the Project issue tracking 4.7.0 up to and including 5.x prior to 20070123 module for Drupal allows remote authenticated users to bypass other access control modules and obtain attached files by guessing the filename, and obtain issue informat...
Drupal Project 4.6Drupal Project 4.6 1.1Drupal Project 4.7Drupal Project Issue Tracking Module 5.0Drupal Project Issue Tracking Module 4.7 1.1Drupal Project Issue Tracking Module 4.7 2.1Drupal Project 4.7 1.1Drupal Project 4.7 2.1Drupal Project 5.0Drupal Project Issue Tracking Module 4.7
4.3
CVSSv2
CVE-2007-0534
Multiple cross-site scripting (XSS) vulnerabilities in the (1) Project issue tracking 4.7.0 up to and including 5.x prior to 20070123 and (2) Project 4.6.0 up to and including 5.x prior to 20070123 modules for Drupal allow remote authenticated users to inject arbitrary web script...
Drupal ProjectDrupal Project Issue Tracking ModuleDrupal Project 4.6.0Drupal Project Issue Tracking Module 4.7.0
6.4
CVSSv2
CVE-2008-0577
The Project Issue Tracking module 5.x-2.x-dev prior to 20080130 in the 5.x-2.x series, 5.x-1.2 and previous versions in the 5.x-1.x series, 4.7.x-2.6 and previous versions in the 4.7.x-2.x series, and 4.7.x-1.6 and previous versions in the 4.7.x-1.x series for Drupal (1) does not...
Drupal Project Issue Tracking Module 4.7Drupal Project Issue Tracking Module 5.0
5
CVSSv2
CVE-2007-4436
The Drupal Project module prior to 5.x-1.0, 4.7.x-2.3, and 4.7.x-1.3 and Project issue tracking module prior to 5.x-1.0, 4.7.x-2.4, and 4.7.x-1.4 do not properly enforce permissions, which allows remote malicious users to (1) obtain sensitive via the Tracker Module and the Recent...
Drupal ProjectDrupal Project Issue Tracking Module
3.5
CVSSv2
CVE-2007-1368
The Project issue tracking module prior to 4.7.x-1.3, 4.7.x-2.* prior to 4.7.x-2.3, and 5 prior to 5.x-0.2-beta for Drupal allows remote authenticated users, with "access project issues" permission, to read the contents of a private node via a URL with a modified node i...
Drupal Drupal Project Issue Tracking 4.7 1.2Drupal Drupal Project Issue Tracking 4.7 2.0Drupal Drupal Project Issue Tracking 4.7 2.1Drupal Drupal Project Issue Tracking 4.7 2.2Drupal Drupal Project Issue Tracking 4.7 1.0Drupal Drupal Project Issue Tracking 5.0 0.1Drupal Drupal Project Issue Tracking 5.7 1.1
3.5
CVSSv2
CVE-2007-5228
Cross-site scripting (XSS) vulnerability in the subscription functionality in the Project issue tracking module prior to 4.7.x-1.5, 4.7.x-2.x prior to 4.7.x-2.5, and 5.x-1.x prior to 5.x-1.1 for Drupal allows remote authenticated users with project create or edit permissions to i...
Drupal Drupal Project Issue Tracking 4.7 1.2Drupal Drupal Project Issue Tracking 4.7 2.0Drupal Drupal Project Issue Tracking 4.7 2.1Drupal Drupal Project Issue Tracking 4.7 2.2Drupal Drupal Project Issue Tracking 5.0 0.1Drupal Drupal Project Issue Tracking 4.7 1.0
7.5
CVSSv2
CVE-2008-1731
The Simple Access module for Drupal 5.x up to and including 5.x-1.2-2 does not properly handle the privacy information for nodes, which might allow remote malicious users to bypass intended access restrictions, and read or modify nodes, in opportunistic circumstances related to i...
3281d Simple Access 5.x-1.13281d Simple Access 5.x-1.x-dev3281d Simple Access 5.x-1.23281d Simple Access 5.x-1.2-13281d Simple Access 5.x-1.03281d Simple Access 5.x-1.0-beta1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7028memory leaklog injectionCVE-2024-3400CVE-2022-48695CVE-2022-48675CVE-2024-34487CVE-2024-33792spoof
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook