Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
drupal drupal 4.7.0 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2006-2742
SQL injection vulnerability in Drupal 4.6.x prior to 4.6.7 and 4.7.0 allows remote malicious users to execute arbitrary SQL commands via the (1) count and (2) from variables to (a) database.mysql.inc, (b) database.pgsql.inc, and (c) database.mysqli.inc.
Drupal Drupal 4.6.5
Drupal Drupal 4.6.6
Drupal Drupal 4.6.3
Drupal Drupal 4.6.4
Drupal Drupal 4.6
Drupal Drupal 4.6.0
Drupal Drupal 4.7.0
Drupal Drupal 4.6.1
Drupal Drupal 4.6.2
NA
CVE-2006-2743
Drupal 4.6.x prior to 4.6.7 and 4.7.0, when running on Apache with mod_mime, does not properly handle files with multiple extensions, which allows remote malicious users to upload, modify, or execute arbitrary files in the files directory.
Drupal Drupal 4.6.3
Drupal Drupal 4.6.4
Drupal Drupal 4.6.1
Drupal Drupal 4.6.2
Drupal Drupal 4.6.5
Drupal Drupal 4.6.6
Drupal Drupal 4.7.0
Drupal Drupal 4.6
Drupal Drupal 4.6.0
1 EDB exploit
NA
CVE-2006-4355
Cross-site scripting (XSS) vulnerability in Drupal Easylinks Module (easylinks.module) 4.7 prior to 1.5.2.1 2006/08/19 12:02:27 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Drupal Drupal Easylinks Module 4.7
Drupal Drupal Easylinks Module 4.7.0
Drupal Drupal Easylinks Module 4.7.1
Drupal Drupal Easylinks Module 4.7.2
NA
CVE-2006-4356
SQL injection vulnerability in Drupal Easylinks Module (easylinks.module) 4.7 prior to 1.5.2.1 2006/08/19 12:02:27 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.
Drupal Drupal Easylinks Module 4.7.0
Drupal Drupal Easylinks Module 4.7.1
Drupal Drupal Easylinks Module 4.7.2
Drupal Drupal Easylinks Module 4.7
NA
CVE-2006-2832
Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x prior to 4.6.8 and 4.7.x prior to 4.7.2 allows remote malicious users to inject arbitrary web script or HTML via the uploaded filename.
Drupal Drupal 4.6.5
Drupal Drupal 4.6.6
Drupal Drupal 4.6.3
Drupal Drupal 4.6.4
Drupal Drupal 4.6
Drupal Drupal 4.6.0
Drupal Drupal 4.6.7
Drupal Drupal 4.7.0
Drupal Drupal 4.6.1
Drupal Drupal 4.6.2
Drupal Drupal 4.7.1
NA
CVE-2006-2831
Drupal 4.6.x prior to 4.6.8 and 4.7.x prior to 4.7.2, when running under certain Apache configurations such as when FileInfo overrides are disabled within .htaccess, allows remote malicious users to execute arbitrary code by uploading a file with multiple extensions, a variant of...
Drupal Drupal 4.6.0
Drupal Drupal 4.6.1
Drupal Drupal 4.7.1
Drupal Drupal 4.6
Drupal Drupal 4.6.6
Drupal Drupal 4.6.7
Drupal Drupal 4.7.0
Drupal Drupal 4.6.2
Drupal Drupal 4.6.3
Drupal Drupal 4.6.4
Drupal Drupal 4.6.5
NA
CVE-2007-4064
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x prior to 5.2, and 4.7.x prior to 4.7.7, (1) allow remote malicious users to inject arbitrary web script or HTML via "some server variables," including PHP_SELF; and (2) allow remote authenticated administ...
Drupal Drupal 4.7.4
Drupal Drupal 4.7.5
Drupal Drupal 4.7.0
Drupal Drupal 4.7.1
Drupal Drupal 5.0
Drupal Drupal 5.1
Drupal Drupal 4.7.2
Drupal Drupal 4.7.3
Drupal Drupal 4.7
Drupal Drupal 4.7.6
Drupal Drupal 4.7 Rev1.15
NA
CVE-2006-4002
Cross-site scripting (XSS) vulnerability in user.module in Drupal 4.6 prior to 4.6.9, and 4.7 prior to 4.7.3, allows remote malicious users to inject arbitrary web script or HTML via the msg parameter. NOTE: portions of these details are obtained from third party information.
Drupal Drupal 4.6.5
Drupal Drupal 4.6.6
Drupal Drupal 4.6.1
Drupal Drupal 4.6.2
Drupal Drupal 4.7.0
Drupal Drupal 4.7.1
Drupal Drupal 4.6.3
Drupal Drupal 4.6.4
Drupal Drupal 4.7.2
Drupal Drupal 4.6.0
Drupal Drupal 4.6.7
Drupal Drupal 4.6.8
NA
CVE-2006-5476
Cross-site request forgery (CSRF) vulnerability in Drupal 4.6.x prior to 4.6.10 and 4.7.x prior to 4.7.4 allows remote malicious users to perform unauthorized actions as an arbitrary user via unspecified vectors.
Drupal Drupal 4.6.5
Drupal Drupal 4.6.6
Drupal Drupal 4.7.3
Drupal Drupal 4.6.1
Drupal Drupal 4.6.2
Drupal Drupal 4.6.9
Drupal Drupal 4.7.0
Drupal Drupal 4.6.3
Drupal Drupal 4.6.4
Drupal Drupal 4.7.1
Drupal Drupal 4.7.2
Drupal Drupal 4.6.0
Drupal Drupal 4.6.7
Drupal Drupal 4.6.8
NA
CVE-2006-5477
Drupal 4.6.x prior to 4.6.10 and 4.7.x prior to 4.7.4 allows form submissions to be redirected, which allows remote malicious users to obtain arbitrary form information via a crafted URL.
Drupal Drupal 4.6.6
Drupal Drupal 4.6.7
Drupal Drupal 4.6.8
Drupal Drupal 4.6.2
Drupal Drupal 4.6.3
Drupal Drupal 4.7.1
Drupal Drupal 4.7.2
Drupal Drupal 4.6.4
Drupal Drupal 4.6.5
Drupal Drupal 4.7.3
Drupal Drupal 4.6.0
Drupal Drupal 4.6.1
Drupal Drupal 4.6.9
Drupal Drupal 4.7.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
HTML injection
CVE-2024-35894
SQL
CVE-2024-5105
CVE-2014-100005
CVE-2024-35895
unauthorized
CVE-2024-22120
CVE-2024-35890
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »