Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
drupal drupal 4.7 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2007-5228
Cross-site scripting (XSS) vulnerability in the subscription functionality in the Project issue tracking module prior to 4.7.x-1.5, 4.7.x-2.x prior to 4.7.x-2.5, and 5.x-1.x prior to 5.x-1.1 for Drupal allows remote authenticated users with project create or edit permissions to i...
Drupal Drupal Project Issue Tracking 4.7 1.2
Drupal Drupal Project Issue Tracking 4.7 2.0
Drupal Drupal Project Issue Tracking 4.7 2.1
Drupal Drupal Project Issue Tracking 4.7 2.2
Drupal Drupal Project Issue Tracking 5.0 0.1
Drupal Drupal Project Issue Tracking 4.7 1.0
NA
CVE-2006-2832
Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x prior to 4.6.8 and 4.7.x prior to 4.7.2 allows remote malicious users to inject arbitrary web script or HTML via the uploaded filename.
Drupal Drupal 4.6.5
Drupal Drupal 4.6.6
Drupal Drupal 4.6.3
Drupal Drupal 4.6.4
Drupal Drupal 4.6
Drupal Drupal 4.6.0
Drupal Drupal 4.6.7
Drupal Drupal 4.7.0
Drupal Drupal 4.6.1
Drupal Drupal 4.6.2
Drupal Drupal 4.7.1
NA
CVE-2006-2831
Drupal 4.6.x prior to 4.6.8 and 4.7.x prior to 4.7.2, when running under certain Apache configurations such as when FileInfo overrides are disabled within .htaccess, allows remote malicious users to execute arbitrary code by uploading a file with multiple extensions, a variant of...
Drupal Drupal 4.6.0
Drupal Drupal 4.6.1
Drupal Drupal 4.7.1
Drupal Drupal 4.6
Drupal Drupal 4.6.6
Drupal Drupal 4.6.7
Drupal Drupal 4.7.0
Drupal Drupal 4.6.2
Drupal Drupal 4.6.3
Drupal Drupal 4.6.4
Drupal Drupal 4.6.5
NA
CVE-2006-4717
The login redirection mechanism in the Drupal 4.7 Pubcookie module prior to 1.2.2.4 2006/09/06 and the Drupal 4.6 Pubcookie module prior to 1.6.2.1 2006/09/07 allows remote malicious users to bypass authentication requirements and spoof identities of arbitrary users via unspecifi...
Drupal Drupal Pubcookie Module 1.2.2.4
Drupal Drupal Pubcookie Module 1.6.2.1
NA
CVE-2009-1823
Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 5.x prior to 5.x-4.7 and 6.x prior to 6.x-1.7, a module for Drupal, allows remote malicious users to inject arbitrary web script or HTML by modifying a document head, before the Co...
Drupal Print 5.x-2.2
Drupal Print 5.x-2.x-dev
Drupal Print 5.x-3.6
Drupal Print 5.x-3.7
Drupal Print 6.x-1.1
Drupal Print 6.x-1.2
Drupal Print 5.x-4.3
Drupal Print 5.x-4.4
Drupal Print 5.x-1.0
Drupal Print 5.x-1.1
Drupal Print 5.x-1.2
Drupal Print 5.x-3.2
Drupal Print 5.x-3.3
Drupal Print 6.x-1.0-rc4
Drupal Print 6.x-1.0-rc5
Drupal Print 6.x-1.6
Drupal Print 5.x-4.0
Drupal Print 5.x-1.x-dev
Drupal Print 5.x-2.1
Drupal Print 5.x-3.4
Drupal Print 5.x-3.5
Drupal Print 6.x-1.0-rc8
NA
CVE-2007-5595
CRLF injection vulnerability in the drupal_goto function in includes/common.inc Drupal 4.7.x prior to 4.7.8 and 5.x prior to 5.3 allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Drupal Drupal
NA
CVE-2007-5596
The core Upload module in Drupal 4.7.x prior to 4.7.8 and 5.x prior to 5.3 places the .html extension on a whitelist, which allows remote malicious users to conduct cross-site scripting (XSS) attacks by uploading .html files.
Drupal Drupal
NA
CVE-2007-0136
Multiple cross-site scripting (XSS) vulnerabilities in Drupal prior to 4.6.11, and 4.7 prior to 4.7.5, allow remote malicious users to inject arbitrary web script or HTML via unspecified parameters in the (1) filter and (2) system modules. NOTE: some of these details are obtained...
Drupal Drupal
NA
CVE-2007-5597
The hook_comments API in Drupal 4.7.x prior to 4.7.8 and 5.x prior to 5.3 does not pass publication status, which might allow malicious users to bypass access restrictions and trigger e-mail with unpublished comments from some modules, as demonstrated by (1) Organic groups and (2...
Drupal Drupal
NA
CVE-2007-0507
SQL injection vulnerability in the Acidfree module for Drupal prior to 4.6.x-1.0, and prior to 4.7.x-1.0 in the 4.7 series, allows remote authenticated users with "create acidfree albums" privileges to execute arbitrary SQL commands via node titles.
Drupal Acidfree 4.6 1.0
Drupal Acidfree 4.7 1.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypass
CVE-2024-30051
remote
CVE-2024-27954
CVE-2023-51483
CVE-2023-47782
SSRF
CVE-2024-24715
CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »