Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
drupal drupal 4.6 vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2006-3570
Cross-site scripting (XSS) vulnerability in the webform module in Drupal 4.6 before July 8, 2006 and 4.7 before July 8, 2006 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Drupal Drupal 4.6
Drupal Drupal 4.7
6.8
CVSSv2
CVE-2006-6646
Multiple cross-site scripting (XSS) vulnerabilities in Drupal (1) Project Issue Tracking 4.7.x-1.0 and 4.7.x-2.0, and (2) Project 4.6.x-1.0, 4.7.x-1.0, and 4.7.x-2.0 allow remote malicious users to inject arbitrary web script or HTML via unspecified parameters, which do not use t...
Drupal Drupal Project 4.7
Drupal Drupal Project 4.7 1.0
Drupal Drupal Project Issue Tracking 4.7 2.0
Drupal Drupal Project Issue Tracking 4.7 1.0
Drupal Drupal Project 4.6
Drupal Drupal Project 4.7 2.0
Drupal Drupal Project 4.6 1.0
7.5
CVSSv2
CVE-2006-2742
SQL injection vulnerability in Drupal 4.6.x prior to 4.6.7 and 4.7.0 allows remote malicious users to execute arbitrary SQL commands via the (1) count and (2) from variables to (a) database.mysql.inc, (b) database.pgsql.inc, and (c) database.mysqli.inc.
Drupal Drupal 4.6.0
Drupal Drupal 4.6
Drupal Drupal 4.6.5
Drupal Drupal 4.6.2
Drupal Drupal 4.6.3
Drupal Drupal 4.6.4
Drupal Drupal 4.7.0
Drupal Drupal 4.6.1
Drupal Drupal 4.6.6
5.1
CVSSv2
CVE-2006-2743
Drupal 4.6.x prior to 4.6.7 and 4.7.0, when running on Apache with mod_mime, does not properly handle files with multiple extensions, which allows remote malicious users to upload, modify, or execute arbitrary files in the files directory.
Drupal Drupal 4.6.0
Drupal Drupal 4.6
Drupal Drupal 4.6.5
Drupal Drupal 4.6.2
Drupal Drupal 4.6.3
Drupal Drupal 4.6.4
Drupal Drupal 4.7.0
Drupal Drupal 4.6.1
Drupal Drupal 4.6.6
1 EDB exploit
6.8
CVSSv2
CVE-2006-4646
Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Pathauto module before pathauto_node.inc 1.17.2.1 and the Drupal 4.6 Pathauto module before pathauto_node.inc 1.14.2.1 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Drupal Drupal Pathauto Module 4.7
Drupal Drupal Pathauto Module 4.6
6.4
CVSSv2
CVE-2005-3974
Drupal 4.5.0 up to and including 4.5.5 and 4.6.0 up to and including 4.6.3, when running on PHP5, does not correctly enforce user privileges, which allows remote malicious users to bypass the "access user profiles" permission.
Drupal Drupal 4.6
Drupal Drupal 4.5.4
Drupal Drupal 4.5.2
Drupal Drupal 4.6.2
Drupal Drupal 4.5.1
Drupal Drupal 4.6.3
Drupal Drupal 4.5.5
Drupal Drupal 4.5
Drupal Drupal 4.6.1
Drupal Drupal 4.5.3
4.3
CVSSv2
CVE-2006-2260
Cross-site scripting (XSS) vulnerability in the project module (project.module) in Drupal 4.5 and 4.6 allows remote malicious users to inject arbitrary web script or HTML via unknown attack vectors.
Drupal Drupal 4.6
Drupal Drupal 4.5.4
Drupal Drupal 4.5.2
Drupal Drupal 4.6.2
Drupal Drupal 4.5.1
Drupal Drupal 4.6.3
Drupal Drupal 4.5.5
Drupal Drupal 4.5
Drupal Drupal 4.6.1
Drupal Drupal 4.5.3
7.5
CVSSv2
CVE-2006-2831
Drupal 4.6.x prior to 4.6.8 and 4.7.x prior to 4.7.2, when running under certain Apache configurations such as when FileInfo overrides are disabled within .htaccess, allows remote malicious users to execute arbitrary code by uploading a file with multiple extensions, a variant of...
Drupal Drupal 4.6.0
Drupal Drupal 4.6
Drupal Drupal 4.6.5
Drupal Drupal 4.6.2
Drupal Drupal 4.6.3
Drupal Drupal 4.6.4
Drupal Drupal 4.7.0
Drupal Drupal 4.6.7
Drupal Drupal 4.6.1
Drupal Drupal 4.7.1
Drupal Drupal 4.6.6
2.6
CVSSv2
CVE-2006-2832
Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x prior to 4.6.8 and 4.7.x prior to 4.7.2 allows remote malicious users to inject arbitrary web script or HTML via the uploaded filename.
Drupal Drupal 4.6.0
Drupal Drupal 4.6
Drupal Drupal 4.6.5
Drupal Drupal 4.6.2
Drupal Drupal 4.6.3
Drupal Drupal 4.6.4
Drupal Drupal 4.7.0
Drupal Drupal 4.6.7
Drupal Drupal 4.6.1
Drupal Drupal 4.7.1
Drupal Drupal 4.6.6
8.5
CVSSv2
CVE-2007-0505
Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 up to and including 5.x prior to 20070123, a module for Drupal, allows remote authenticated users to execute arbitrary code by attaching a file with executable or multiple extensions to a project issue.
Drupal Project Issue Tracking Module 4.7
Drupal Project 5.0
Drupal Project Issue Tracking Module 5.0
Drupal Project 4.7 2.1
Drupal Project Issue Tracking Module 4.7 2.1
Drupal Project 4.6
Drupal Project 4.7 1.1
Drupal Project 4.6 1.1
Drupal Project Issue Tracking Module 4.7 1.1
Drupal Project 4.7
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5834
CVE-2024-30100
CVE-2024-4577
physical
dos
CVE-2024-30099
CVE-2024-27801
CVE-2024-32146
logic flaw
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
NEXT »