Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
drupal project 4.6 1.1 vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2006-2831
Drupal 4.6.x prior to 4.6.8 and 4.7.x prior to 4.7.2, when running under certain Apache configurations such as when FileInfo overrides are disabled within .htaccess, allows remote malicious users to execute arbitrary code by uploading a file with multiple extensions, a variant of...
Drupal Drupal 4.6.0
Drupal Drupal 4.6.1
Drupal Drupal 4.7.1
Drupal Drupal 4.6
Drupal Drupal 4.6.6
Drupal Drupal 4.6.7
Drupal Drupal 4.7.0
Drupal Drupal 4.6.2
Drupal Drupal 4.6.3
Drupal Drupal 4.6.4
Drupal Drupal 4.6.5
7.5
CVSSv2
CVE-2006-2742
SQL injection vulnerability in Drupal 4.6.x prior to 4.6.7 and 4.7.0 allows remote malicious users to execute arbitrary SQL commands via the (1) count and (2) from variables to (a) database.mysql.inc, (b) database.pgsql.inc, and (c) database.mysqli.inc.
Drupal Drupal 4.6.5
Drupal Drupal 4.6.6
Drupal Drupal 4.6.3
Drupal Drupal 4.6.4
Drupal Drupal 4.6
Drupal Drupal 4.6.0
Drupal Drupal 4.7.0
Drupal Drupal 4.6.1
Drupal Drupal 4.6.2
5.1
CVSSv2
CVE-2006-2743
Drupal 4.6.x prior to 4.6.7 and 4.7.0, when running on Apache with mod_mime, does not properly handle files with multiple extensions, which allows remote malicious users to upload, modify, or execute arbitrary files in the files directory.
Drupal Drupal 4.6.3
Drupal Drupal 4.6.4
Drupal Drupal 4.6.1
Drupal Drupal 4.6.2
Drupal Drupal 4.6.5
Drupal Drupal 4.6.6
Drupal Drupal 4.7.0
Drupal Drupal 4.6
Drupal Drupal 4.6.0
1 EDB exploit
2.6
CVSSv2
CVE-2006-2832
Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x prior to 4.6.8 and 4.7.x prior to 4.7.2 allows remote malicious users to inject arbitrary web script or HTML via the uploaded filename.
Drupal Drupal 4.6.5
Drupal Drupal 4.6.6
Drupal Drupal 4.6.3
Drupal Drupal 4.6.4
Drupal Drupal 4.6
Drupal Drupal 4.6.0
Drupal Drupal 4.6.7
Drupal Drupal 4.7.0
Drupal Drupal 4.6.1
Drupal Drupal 4.6.2
Drupal Drupal 4.7.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32976
CVE-2024-33557
CVE-2024-36801
CVE-2024-35654
authentication bypass
CVE-2024-24919
CSRF
code execution
CVE-2024-27348
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started