Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
drupal drupal 5.x vulnerabilities and exploits
(subscribe to this query)
3.5
CVSSv2
CVE-2009-0603
Cross-site scripting (XSS) vulnerability in index.php in the Link module 5.x-2.5 for Drupal 5.10 allows remote authenticated users, with "administer content types" privileges, to inject arbitrary web script or HTML via the description parameter (aka the Help field). NOT...
Drupal Link Module 5.x-2.5
3.5
CVSSv2
CVE-2009-4369
Cross-site scripting (XSS) vulnerability in the Contact module (modules/contact/contact.admin.inc or modules/contact/contact.module) in Drupal Core 5.x prior to 5.21 and 6.x prior to 6.15 allows remote authenticated users with "administer site-wide contact form" permiss...
Drupal Drupal 5.10
Drupal Drupal 5.4
Drupal Drupal 6.0
Drupal Drupal 6.2
Drupal Drupal 5.17
Drupal Drupal 5.13
Drupal Drupal 6.14
Drupal Drupal 6.13
Drupal Drupal 5.12
Drupal Drupal 5.2
Drupal Drupal 6.12
Drupal Drupal 5.7
Drupal Drupal 6.4
Drupal Drupal 5.0
Drupal Drupal 6.11
Drupal Drupal 5.16
Drupal Drupal 5.15
Drupal Drupal 5.x
Drupal Drupal 5.18
Drupal Drupal 6.7
Drupal Drupal 6.8
Drupal Drupal 6.1
6.8
CVSSv2
CVE-2009-4066
Multiple cross-site request forgery (CSRF) vulnerabilities in the "My Account" feature in PHPList Integration module 5 prior to 5.x-1.2 and 6 prior to 6.x-1.1 for Drupal allow remote malicious users to hijack the authentication of arbitrary users via vectors related to ...
Drupal Drupal
Paul Beaney Phplist 5.x-1.0
Paul Beaney Phplist 5.x-1.1
Paul Beaney Phplist 5.x-1.x
Paul Beaney Phplist 6.x-1.0
Paul Beaney Phplist 6.x-1.x
5
CVSSv2
CVE-2007-0658
The (1) Textimage 4.7.x prior to 4.7-1.2 and 5.x prior to 5.x-1.1 module for Drupal and the (2) Captcha 4.7.x prior to 4.7-1.2 and 5.x prior to 5.x-1.1 module for Drupal allow remote malicious users to bypass the CAPTCHA test via an empty captcha element in $_SESSION.
Drupal Drupal 4.7.2
Drupal Textimage 4.7
Drupal Drupal 4.7.5
Drupal Drupal 4.7.3
Drupal Drupal 5.0
Drupal Drupal 4.7 Rev1.15
Drupal Drupal 4.7
Drupal Drupal 4.7.6
Drupal Drupal 5.1
Drupal Drupal 4.7.4
Drupal Drupal 4.7.1
Drupal Textimage 5.0
4.3
CVSSv2
CVE-2008-0272
Cross-site request forgery (CSRF) vulnerability in the aggregator module in Drupal 4.7.x prior to 4.7.11 and 5.x prior to 5.6 allows remote malicious users to delete items from a feed as privileged users.
Drupal Drupal 4.6
Drupal Drupal 5.4
Drupal Drupal 4.6.5
Drupal Drupal 4.5.4
Drupal Drupal 4.7.2
Drupal Drupal 4.6.10
Drupal Drupal 4.6.9
Drupal Drupal 5.2
Drupal Drupal 4.5.2
Drupal Drupal 4.7.5
Drupal Drupal 4.6.2
Drupal Drupal 4.6.8
Drupal Drupal 4.7.3
Drupal Drupal 4.4
Drupal Drupal 5.1 Rev1.1
Drupal Drupal 4.7.10
Drupal Drupal 4.7.8
Drupal Drupal 4.5.7
Drupal Drupal 4.4.1
Drupal Drupal 4.5.1
Drupal Drupal 5.0
Drupal Drupal 4.4.2
4.3
CVSSv2
CVE-2008-0276
Cross-site scripting (XSS) vulnerability in the Devel module prior to 5.x-0.1 for Drupal allows remote malicious users to inject arbitrary web script or HTML via a site variable, related to lack of escaping of the variable table.
Drupal Drupal 4.6
Drupal Drupal 5.4
Drupal Drupal 4.6.5
Drupal Drupal 4.5.4
Drupal Drupal 4.7.2
Drupal Drupal 4.6.10
Drupal Drupal 4.6.9
Drupal Drupal 5.2
Drupal Drupal 4.5.2
Drupal Drupal 4.7.5
Drupal Drupal 4.6.2
Drupal Drupal 4.6.8
Drupal Drupal 4.7.3
Drupal Drupal 4.4
Drupal Drupal 5.1 Rev1.1
Drupal Drupal 4.7.10
Drupal Drupal 4.7.8
Drupal Drupal 4.5.7
Drupal Drupal 4.4.1
Drupal Drupal 4.5.1
Drupal Drupal 5.0
Drupal Drupal 4.4.2
6.8
CVSSv2
CVE-2007-6752
Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and previous versions allows remote malicious users to hijack the authentication of arbitrary users for requests that end a session via the user/logout URI. NOTE: the vendor disputes the significance of this issue, by...
Drupal Drupal 4.6.0
Drupal Drupal 4.6
Drupal Drupal 7.0
Drupal Drupal 5.10
Drupal Drupal 5.4
Drupal Drupal 4.6.5
Drupal Drupal 4.5.4
Drupal Drupal 6.0
Drupal Drupal 4.7.2
Drupal Drupal 4.6.10
Drupal Drupal 6.2
Drupal Drupal 5.17
Drupal Drupal 4.6.9
Drupal Drupal 5.13
Drupal Drupal 6.14
Drupal Drupal 6.24
Drupal Drupal 6.13
Drupal Drupal 4.5.0
Drupal Drupal 5.12
Drupal Drupal 6.18
Drupal Drupal 5.2
Drupal Drupal 7.3
1 EDB exploit
7.5
CVSSv2
CVE-2007-6299
Multiple SQL injection vulnerabilities in Drupal and vbDrupal 4.7.x prior to 4.7.9 and 5.x prior to 5.4 allow remote malicious users to execute arbitrary SQL commands via modules that pass input to the taxonomy_select_nodes function, as demonstrated by the (1) taxonomy_menu, (2) ...
Drupal Drupal 4.6.0
Drupal Drupal 4.6
Drupal Drupal 4.6.5
Drupal Drupal 4.5.4
Drupal Drupal 4.7.2
Drupal Drupal 4.6.10
Drupal Drupal 4.6.9
Drupal Drupal 5.2
Drupal Drupal 4.5.2
Drupal Drupal 4.7.5
Drupal Drupal 4.6.2
Drupal Drupal 4.6.8
Drupal Drupal 4.7.3
Drupal Drupal 5.1 Rev1.1
Drupal Drupal 4.7.8
Drupal Drupal 4.5.7
Drupal Drupal 4.4.1
Drupal Drupal 4.5.1
Drupal Drupal 5.0
Drupal Drupal 4.4.2
Drupal Drupal 4.6.3
Drupal Drupal 4.5.8
9.3
CVSSv2
CVE-2008-6171
includes/bootstrap.inc in Drupal 5.x prior to 5.12 and 6.x prior to 6.6, when the server is configured for "IP-based virtual hosts," allows remote malicious users to include and execute arbitrary files via the HTTP Host header.
Drupal Drupal 5.10
Drupal Drupal 5.4
Drupal Drupal 6.2
Drupal Drupal 5.2
Drupal Drupal 5.7
Drupal Drupal 6.4
Drupal Drupal 5.0
Drupal Drupal 6.1
Drupal Drupal 5.6
Drupal Drupal 5.1
Drupal Drupal 6.5
Drupal Drupal 5.5
Drupal Drupal 6.0
Drupal Drupal 5.9
Drupal Drupal 5.8
Drupal Drupal 5.3
Drupal Drupal 6.3
Drupal Drupal 5.11
6
CVSSv2
CVE-2008-4790
The core upload module in Drupal 5.x prior to 5.11 allows remote authenticated users to bypass intended access restrictions and read "files attached to content" via unknown vectors.
Drupal Drupal 5.4
Drupal Drupal 5.2
Drupal Drupal 5.7
Drupal Drupal 5.0
Drupal Drupal
Drupal Drupal 5.6
Drupal Drupal 5.1
Drupal Drupal 5.5
Drupal Drupal 5.9
Drupal Drupal 5.8
Drupal Drupal 5.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
IMAP
CVE-2024-36103
CVE-2024-28995
CVE-2024-37325
CVE-2024-30078
CVE-2024-30082
SQL injection
CVE-2024-30052
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »