Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
drupal drupal 6.1 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2012-1640
Multiple cross-site scripting (XSS) vulnerabilities in the Managesite module 6.x-1.x prior to 6.1-1.1 for Drupal allow remote authenticated users with "administer managesite" permissions to inject arbitrary web script or HTML via the title parameter when (1) adding or (...
Alquimia Managesite 6.x-1.0
Alquimia Managesite 6.x-1.x
NA
CVE-2012-2922
The request_path function in includes/bootstrap.inc in Drupal 7.14 and previous versions allows remote malicious users to obtain sensitive information via the q[] parameter to index.php, which reveals the installation path in an error message.
Drupal Drupal 7.0
Drupal Drupal 5.10
Drupal Drupal 5.4
Drupal Drupal 6.0
Drupal Drupal 6.2
Drupal Drupal 5.17
Drupal Drupal 5.13
Drupal Drupal 6.14
Drupal Drupal 6.13
Drupal Drupal 5.12
Drupal Drupal 6.18
Drupal Drupal 5.2
Drupal Drupal 7.3
Drupal Drupal 6.12
Drupal Drupal 5.7
Drupal Drupal 7.8
Drupal Drupal 6.4
Drupal Drupal 7.5
Drupal Drupal 5.23
Drupal Drupal 5.0
Drupal Drupal 6.11
Drupal Drupal 7.10
NA
CVE-2007-6752
Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and previous versions allows remote malicious users to hijack the authentication of arbitrary users for requests that end a session via the user/logout URI. NOTE: the vendor disputes the significance of this issue, by...
Drupal Drupal 4.6.0
Drupal Drupal 4.6
Drupal Drupal 7.0
Drupal Drupal 5.10
Drupal Drupal 5.4
Drupal Drupal 4.6.5
Drupal Drupal 4.5.4
Drupal Drupal 6.0
Drupal Drupal 4.7.2
Drupal Drupal 4.6.10
Drupal Drupal 6.2
Drupal Drupal 5.17
Drupal Drupal 4.6.9
Drupal Drupal 5.13
Drupal Drupal 6.14
Drupal Drupal 6.24
Drupal Drupal 6.13
Drupal Drupal 4.5.0
Drupal Drupal 5.12
Drupal Drupal 6.18
Drupal Drupal 5.2
Drupal Drupal 7.3
1 EDB exploit
NA
CVE-2010-3091
The OpenID module in Drupal 6.x prior to 6.18, and the OpenID module 5.x prior to 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not verifying the openid.return_to value, which allows remote malicious users to bypass authentication by leveraging an assertion from an Open...
Drupal Drupal 6.0
Drupal Drupal 6.2
Drupal Drupal 6.14
Drupal Drupal 6.13
Drupal Drupal 6.12
Drupal Drupal 6.4
Drupal Drupal 6.11
Drupal Drupal 6.7
Drupal Drupal 6.8
Drupal Drupal 6.1
Drupal Drupal 6.17
Drupal Drupal 6.5
Drupal Drupal 6.10
Drupal Drupal 6.6
Drupal Drupal 6.15
Drupal Drupal 6.16
Drupal Drupal 6.3
Drupal Drupal 6.9
Peter Wolanin Openid 5.x-1.1
Peter Wolanin Openid 5.x-1.0
Peter Wolanin Openid 5.x-1.2
Peter Wolanin Openid 5.x-1.3
NA
CVE-2010-3685
The OpenID module in Drupal 6.x prior to 6.18, and the OpenID module 5.x prior to 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not checking for reuse of openid.response_nonce values, which allows remote malicious users to bypass authentication by leveraging an assertio...
Drupal Drupal 6.0
Drupal Drupal 6.2
Drupal Drupal 6.14
Drupal Drupal 6.13
Drupal Drupal 6.12
Drupal Drupal 6.4
Drupal Drupal 6.11
Drupal Drupal 6.7
Drupal Drupal 6.8
Drupal Drupal 6.1
Drupal Drupal 6.17
Drupal Drupal 6.5
Drupal Drupal 6.10
Drupal Drupal 6.6
Drupal Drupal 6.15
Drupal Drupal 6.16
Drupal Drupal 6.3
Drupal Drupal 6.9
Peter Wolanin Openid 5.x-1.1
Peter Wolanin Openid 5.x-1.0
Peter Wolanin Openid 5.x-1.2
Peter Wolanin Openid 5.x-1.3
NA
CVE-2010-3686
The OpenID module in Drupal 6.x prior to 6.18, and the OpenID module 5.x prior to 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not ensuring that fields are signed, which allows remote malicious users to bypass authentication by leveraging an assertion from an OpenID pr...
Drupal Drupal 6.0
Drupal Drupal 6.2
Drupal Drupal 6.14
Drupal Drupal 6.13
Drupal Drupal 6.12
Drupal Drupal 6.4
Drupal Drupal 6.11
Drupal Drupal 6.7
Drupal Drupal 6.8
Drupal Drupal 6.1
Drupal Drupal 6.17
Drupal Drupal 6.5
Drupal Drupal 6.10
Drupal Drupal 6.6
Drupal Drupal 6.15
Drupal Drupal 6.16
Drupal Drupal 6.3
Drupal Drupal 6.9
Peter Wolanin Openid 5.x-1.1
Peter Wolanin Openid 5.x-1.0
Peter Wolanin Openid 5.x-1.2
Peter Wolanin Openid 5.x-1.3
NA
CVE-2010-3092
The upload module in Drupal 5.x prior to 5.23 and 6.x prior to 6.18 does not properly support case-insensitive filename handling in a database configuration, which allows remote authenticated users to bypass the intended restrictions on downloading a file by uploading a different...
Drupal Drupal 5.10
Drupal Drupal 5.4
Drupal Drupal 5.17
Drupal Drupal 5.13
Drupal Drupal 5.12
Drupal Drupal 5.2
Drupal Drupal 5.7
Drupal Drupal 5.0
Drupal Drupal 5.16
Drupal Drupal 5.15
Drupal Drupal 5.18
Drupal Drupal 5.21
Drupal Drupal 5.22
Drupal Drupal 5.6
Drupal Drupal 5.1
Drupal Drupal 5.19
Drupal Drupal 5.5
Drupal Drupal 5.14
Drupal Drupal 5.9
Drupal Drupal 5.8
Drupal Drupal 5.3
Drupal Drupal 5.11
NA
CVE-2010-3093
The comment module in Drupal 5.x prior to 5.23 and 6.x prior to 6.18 allows remote authenticated users with certain privileges to bypass intended access restrictions and reinstate removed comments via a crafted URL, related to an "unpublishing bypass" issue.
Drupal Drupal 5.10
Drupal Drupal 5.4
Drupal Drupal 5.17
Drupal Drupal 5.13
Drupal Drupal 5.12
Drupal Drupal 5.2
Drupal Drupal 5.7
Drupal Drupal 5.0
Drupal Drupal 5.16
Drupal Drupal 5.15
Drupal Drupal 5.18
Drupal Drupal 5.21
Drupal Drupal 5.22
Drupal Drupal 5.6
Drupal Drupal 5.1
Drupal Drupal 5.19
Drupal Drupal 5.5
Drupal Drupal 5.14
Drupal Drupal 5.9
Drupal Drupal 5.8
Drupal Drupal 5.3
Drupal Drupal 5.11
NA
CVE-2010-3094
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x prior to 6.18 allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via (1) an action description, (2) an action message, (3) a node, or (4) a taxonomy term, related to the...
Drupal Drupal 6.0
Drupal Drupal 6.2
Drupal Drupal 6.14
Drupal Drupal 6.13
Drupal Drupal 6.12
Drupal Drupal 6.4
Drupal Drupal 6.11
Drupal Drupal 6.7
Drupal Drupal 6.8
Drupal Drupal 6.1
Drupal Drupal 6.17
Drupal Drupal 6.5
Drupal Drupal 6.10
Drupal Drupal 6.6
Drupal Drupal 6.15
Drupal Drupal 6.16
Drupal Drupal 6.3
Drupal Drupal 6.9
NA
CVE-2009-4369
Cross-site scripting (XSS) vulnerability in the Contact module (modules/contact/contact.admin.inc or modules/contact/contact.module) in Drupal Core 5.x prior to 5.21 and 6.x prior to 6.15 allows remote authenticated users with "administer site-wide contact form" permiss...
Drupal Drupal 5.10
Drupal Drupal 5.4
Drupal Drupal 6.0
Drupal Drupal 6.2
Drupal Drupal 5.17
Drupal Drupal 5.13
Drupal Drupal 6.14
Drupal Drupal 6.13
Drupal Drupal 5.12
Drupal Drupal 5.2
Drupal Drupal 6.12
Drupal Drupal 5.7
Drupal Drupal 6.4
Drupal Drupal 5.0
Drupal Drupal 6.11
Drupal Drupal 5.16
Drupal Drupal 5.15
Drupal Drupal 5.x
Drupal Drupal 5.18
Drupal Drupal 6.7
Drupal Drupal 6.8
Drupal Drupal 6.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
IMAP
CVE-2024-36103
CVE-2024-28995
CVE-2024-37325
CVE-2024-30078
CVE-2024-30082
SQL injection
CVE-2024-30052
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »