Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
drupal drupal 5.22 vulnerabilities and exploits
(subscribe to this query)
4.8
CVSSv3
CVE-2010-2472
Locale module and dependent contributed modules in Drupal 6.x prior to 6.16 and 5.x before version 5.22 do not sanitize the display of language codes, native and English language names properly which could allow an malicious user to perform a cross-site scripting (XSS) attack. Th...
Drupal Drupal
6.5
CVSSv3
CVE-2010-2473
Drupal 6.x prior to 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user with an open session that was blocked could maintain their session on the Drupal site despite being blocked.
Drupal Drupal
NA
CVE-2012-2922
The request_path function in includes/bootstrap.inc in Drupal 7.14 and previous versions allows remote malicious users to obtain sensitive information via the q[] parameter to index.php, which reveals the installation path in an error message.
Drupal Drupal 7.9
Drupal Drupal 7.8
Drupal Drupal 7.1
Drupal Drupal 7.0
Drupal Drupal 6.6
Drupal Drupal 6.11
Drupal Drupal 6.7
Drupal Drupal 6.0
Drupal Drupal 6.4
Drupal Drupal 6.16
Drupal Drupal 5.15
Drupal Drupal 5.0
Drupal Drupal 5.18
Drupal Drupal 5.9
Drupal Drupal 5.5
Drupal Drupal 5.20
Drupal Drupal 5.10
Drupal Drupal
Drupal Drupal 7.12
Drupal Drupal 7.5
Drupal Drupal 7.4
Drupal Drupal 6.2
NA
CVE-2007-6752
Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and previous versions allows remote malicious users to hijack the authentication of arbitrary users for requests that end a session via the user/logout URI. NOTE: the vendor disputes the significance of this issue, by...
Drupal Drupal 4.6.0
Drupal Drupal 4.6
Drupal Drupal 7.0
Drupal Drupal 5.10
Drupal Drupal 5.4
Drupal Drupal 4.6.5
Drupal Drupal 4.5.4
Drupal Drupal 6.0
Drupal Drupal 4.7.2
Drupal Drupal 4.6.10
Drupal Drupal 6.2
Drupal Drupal 5.17
Drupal Drupal 4.6.9
Drupal Drupal 5.13
Drupal Drupal 6.14
Drupal Drupal 6.24
Drupal Drupal 6.13
Drupal Drupal 4.5.0
Drupal Drupal 5.12
Drupal Drupal 6.18
Drupal Drupal 5.2
Drupal Drupal 7.3
1 EDB exploit
NA
CVE-2010-3092
The upload module in Drupal 5.x prior to 5.23 and 6.x prior to 6.18 does not properly support case-insensitive filename handling in a database configuration, which allows remote authenticated users to bypass the intended restrictions on downloading a file by uploading a different...
Drupal Drupal 5.0
Drupal Drupal 5.10
Drupal Drupal 5.11
Drupal Drupal 5.12
Drupal Drupal 5.13
Drupal Drupal 5.14
Drupal Drupal 5.2
Drupal Drupal 5.3
Drupal Drupal 5.4
Drupal Drupal 5.5
Drupal Drupal 5.19
Drupal Drupal 5.20
Drupal Drupal 5.21
Drupal Drupal 5.22
Drupal Drupal 5.1
Drupal Drupal 5.6
Drupal Drupal 5.8
Drupal Drupal 5.15
Drupal Drupal 5.17
Drupal Drupal 5.7
Drupal Drupal 5.9
Drupal Drupal 5.16
NA
CVE-2010-3093
The comment module in Drupal 5.x prior to 5.23 and 6.x prior to 6.18 allows remote authenticated users with certain privileges to bypass intended access restrictions and reinstate removed comments via a crafted URL, related to an "unpublishing bypass" issue.
Drupal Drupal 5.4
Drupal Drupal 5.5
Drupal Drupal 5.6
Drupal Drupal 5.7
Drupal Drupal 5.20
Drupal Drupal 5.21
Drupal Drupal 5.22
Drupal Drupal 5.0
Drupal Drupal 5.12
Drupal Drupal 5.13
Drupal Drupal 5.14
Drupal Drupal 5.15
Drupal Drupal 5.1
Drupal Drupal 5.3
Drupal Drupal 5.8
Drupal Drupal 5.10
Drupal Drupal 5.17
Drupal Drupal 5.19
Drupal Drupal 5.2
Drupal Drupal 5.9
Drupal Drupal 5.11
Drupal Drupal 5.16
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23316
SQL injection
type confusion
CVE-2024-20697
CVE-2024-4344
local
CVE-2024-30043
CVE-2024-3821
CVE-2024-5041
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started