Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
drupal drupal 4.5.1 vulnerabilities and exploits
(subscribe to this query)
383
VMScore
CVE-2005-0682
Cross-site scripting (XSS) vulnerability in common.inc in Drupal prior to 4.5.2 allows remote malicious users to inject arbitrary web script or HTML via certain inputs.
Drupal Drupal 4.4.0
Drupal Drupal 4.4.1
Drupal Drupal 4.4.2
Drupal Drupal 4.5.0
Drupal Drupal 4.5.1
505
VMScore
CVE-2005-2106
Unknown vulnerability in Drupal 4.5.0 up to and including 4.5.3, 4.6.0, and 4.6.1 allows remote malicious users to execute arbitrary PHP code via a public comment or posting.
Drupal Drupal 4.5.3
Drupal Drupal 4.6.0
Drupal Drupal 4.6.1
Drupal Drupal 4.5.0
Drupal Drupal 4.5.1
Drupal Drupal 4.5.2
1 EDB exploit
445
VMScore
CVE-2006-1225
CRLF injection vulnerability in Drupal 4.5.x prior to 4.5.8 and 4.6.x prior to 4.5.8 allows remote malicious users to inject headers of outgoing e-mail messages and use Drupal as a spam proxy.
Drupal Drupal 4.5.3
Drupal Drupal 4.6.0
Drupal Drupal 4.6.1
Drupal Drupal 4.5.0
Drupal Drupal 4.5.1
Drupal Drupal 4.5.2
383
VMScore
CVE-2006-1226
Cross-site scripting (XSS) vulnerability in Drupal 4.5.x prior to 4.5.8 and 4.6.x prior to 4.5.8 allows remote malicious users to inject arbitrary web script or HTML via unknown attack vectors.
Drupal Drupal 4.6.1
Drupal Drupal 4.5.1
Drupal Drupal 4.5.2
Drupal Drupal 4.5.0
Drupal Drupal 4.5.3
Drupal Drupal 4.6.0
454
VMScore
CVE-2006-1228
Session fixation vulnerability in Drupal 4.5.x prior to 4.5.8 and 4.6.x prior to 4.5.8 allows remote malicious users to gain privileges by tricking a user to click on a URL that fixes the session identifier.
Drupal Drupal 4.5.0
Drupal Drupal 4.5.1
Drupal Drupal 4.6.0
Drupal Drupal 4.6.1
Drupal Drupal 4.5.2
Drupal Drupal 4.5.3
668
VMScore
CVE-2005-1871
Unknown vulnerability in the privilege system in Drupal 4.4.0 up to and including 4.6.0, when public registration is enabled, allows remote malicious users to gain privileges, due to an "input check" that "is not implemented properly."
Drupal Drupal 4.5.1
Drupal Drupal 4.5.2
Drupal Drupal 4.6.0
Drupal Drupal 4.4.2
Drupal Drupal 4.5.0
Drupal Drupal 4.4.0
Drupal Drupal 4.4.1
383
VMScore
CVE-2005-3973
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 4.5.0 up to and including 4.5.5 and 4.6.0 up to and including 4.6.3 allow remote malicious users to inject arbitrary web script or HTML via various HTML tags and values, such as the (1) legend tag and the value paramet...
Drupal Drupal 4.5.0
Drupal Drupal 4.5.1
Drupal Drupal 4.6.3
Drupal Drupal 4.5.4
Drupal Drupal 4.5.5
Drupal Drupal 4.6.0
Drupal Drupal 4.6.1
Drupal Drupal 4.6.2
Drupal Drupal 4.5.2
Drupal Drupal 4.5.3
570
VMScore
CVE-2005-3974
Drupal 4.5.0 up to and including 4.5.5 and 4.6.0 up to and including 4.6.3, when running on PHP5, does not correctly enforce user privileges, which allows remote malicious users to bypass the "access user profiles" permission.
Drupal Drupal 4.6
Drupal Drupal 4.6.1
Drupal Drupal 4.5.2
Drupal Drupal 4.5.3
Drupal Drupal 4.5.4
Drupal Drupal 4.5.5
Drupal Drupal 4.5
Drupal Drupal 4.5.1
Drupal Drupal 4.6.2
Drupal Drupal 4.6.3
356
VMScore
CVE-2005-3975
Interpretation conflict in file.inc in Drupal 4.5.0 up to and including 4.5.5 and 4.6.0 up to and including 4.6.3 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF or JPEG file extension, which causes the HTML to be executed by...
Drupal Drupal 4.5.3
Drupal Drupal 4.5.4
Drupal Drupal 4.5.0
Drupal Drupal 4.6.1
Drupal Drupal 4.6.2
Drupal Drupal 4.6.3
Drupal Drupal 4.5.1
Drupal Drupal 4.5.2
Drupal Drupal 4.5.5
Drupal Drupal 4.6.0
383
VMScore
CVE-2006-2260
Cross-site scripting (XSS) vulnerability in the project module (project.module) in Drupal 4.5 and 4.6 allows remote malicious users to inject arbitrary web script or HTML via unknown attack vectors.
Drupal Drupal 4.5
Drupal Drupal 4.6.2
Drupal Drupal 4.6.3
Drupal Drupal 4.6
Drupal Drupal 4.6.1
Drupal Drupal 4.5.1
Drupal Drupal 4.5.2
Drupal Drupal 4.5.3
Drupal Drupal 4.5.4
Drupal Drupal 4.5.5
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32976
CVE-2024-33557
CVE-2024-36801
CVE-2024-35654
authentication bypass
CVE-2024-24919
CSRF
code execution
CVE-2024-27348
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »