Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
drupal drupal 6.3 vulnerabilities and exploits
(subscribe to this query)
5.8
CVSSv2
CVE-2008-3744
Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x prior to 5.10 and 6.x prior to 6.4 allow remote malicious users to hijack the authentication of administrators for requests that (1) add or (2) delete user access rules.
Drupal Drupal 5.4
Drupal Drupal 5.5
Drupal Drupal 6.2
Drupal Drupal 6.3
Drupal Drupal 5.2
Drupal Drupal 5.3
Drupal Drupal 6.0
Drupal Drupal 6.1
Drupal Drupal 5.0
Drupal Drupal 5.1
Drupal Drupal 5.8
Drupal Drupal 5.9
Drupal Drupal 5.6
Drupal Drupal 5.7
4.3
CVSSv2
CVE-2008-3740
Cross-site scripting (XSS) vulnerability in the output filter in Drupal 5.x prior to 5.10 and 6.x prior to 6.4 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Drupal Drupal 5.4
Drupal Drupal 5.5
Drupal Drupal 6.2
Drupal Drupal 6.3
Drupal Drupal 5.2
Drupal Drupal 5.3
Drupal Drupal 6.0
Drupal Drupal 6.1
Drupal Drupal 5.0
Drupal Drupal 5.1
Drupal Drupal 5.8
Drupal Drupal 5.9
Drupal Drupal 5.6
Drupal Drupal 5.7
4.3
CVSSv2
CVE-2008-3219
The Drupal filter_xss_admin function in 5.x prior to 5.8 and 6.x prior to 6.3 does not "prevent use of the object HTML tag in administrator input," which has unknown impact and attack vectors, probably related to an insufficient cross-site scripting (XSS) protection mec...
Drupal Drupal
Fedoraproject Fedora 8
Fedoraproject Fedora 9
4.3
CVSSv2
CVE-2008-3220
Cross-site request forgery (CSRF) vulnerability in Drupal 5.x prior to 5.8 and 6.x prior to 6.3 allows remote malicious users to perform administrative actions via vectors involving deletion of "translated strings."
Drupal Drupal
Fedoraproject Fedora 8
Fedoraproject Fedora 9
5.8
CVSSv2
CVE-2008-3222
Session fixation vulnerability in Drupal 5.x prior to 5.9 and 6.x prior to 6.3, when contributed modules "terminate the current request during a login event," allows remote malicious users to hijack web sessions via unknown vectors.
Drupal Drupal
Fedoraproject Fedora 8
Fedoraproject Fedora 9
4.3
CVSSv2
CVE-2008-3218
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x prior to 6.3 allow remote malicious users to inject arbitrary web script or HTML via vectors related to (1) free tagging taxonomy terms, which are not properly handled on node preview pages, and (2) unspecified Ope...
Drupal Drupal
Fedoraproject Fedora 8
Fedoraproject Fedora 9
4.3
CVSSv2
CVE-2008-3221
Cross-site request forgery (CSRF) vulnerability in Drupal 6.x prior to 6.3 allows remote malicious users to perform administrative actions via vectors involving deletion of OpenID identities.
Drupal Drupal
Fedoraproject Fedora 8
Fedoraproject Fedora 9
7.5
CVSSv2
CVE-2008-3223
SQL injection vulnerability in the Schema API in Drupal 6.x prior to 6.3 allows remote malicious users to execute arbitrary SQL commands via vectors related to "an inappropriate placeholder for 'numeric' fields."
Drupal Drupal
Fedoraproject Fedora 8
Fedoraproject Fedora 9
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49223
CVE-2024-0044
information disclosure
CVE-2024-35753
HTML injection
CVE-2024-21306
CVE-2024-35733
SQL injection
CVE-2024-35732
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6