Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
drupal drupal 6.3 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2008-3745
The Upload module in Drupal 6.x prior to 6.4 allows remote authenticated users to edit nodes, delete files, and download unauthorized attachments via unspecified vectors.
Drupal Upload Module
Drupal Drupal 6.1
Drupal Drupal 6.2
Drupal Drupal 6.3
Drupal Drupal 6.0
NA
CVE-2008-3741
The private filesystem in Drupal 5.x prior to 5.10 and 6.x prior to 6.4 trusts the MIME type sent by a web browser, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks by uploading files containing arbitrary web script or HTML.
Drupal Drupal 5.5
Drupal Drupal 5.6
Drupal Drupal 5.7
Drupal Drupal 5.3
Drupal Drupal 5.4
Drupal Drupal 6.2
Drupal Drupal 6.3
Drupal Drupal 5.1
Drupal Drupal 5.2
Drupal Drupal 6.0
Drupal Drupal 6.1
Drupal Drupal 5.0
Drupal Drupal 5.8
Drupal Drupal 5.9
NA
CVE-2008-3218
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x prior to 6.3 allow remote malicious users to inject arbitrary web script or HTML via vectors related to (1) free tagging taxonomy terms, which are not properly handled on node preview pages, and (2) unspecified Ope...
Drupal Drupal
Fedoraproject Fedora 8
Fedoraproject Fedora 9
NA
CVE-2008-3219
The Drupal filter_xss_admin function in 5.x prior to 5.8 and 6.x prior to 6.3 does not "prevent use of the object HTML tag in administrator input," which has unknown impact and attack vectors, probably related to an insufficient cross-site scripting (XSS) protection mec...
Drupal Drupal
Fedoraproject Fedora 8
Fedoraproject Fedora 9
NA
CVE-2008-3220
Cross-site request forgery (CSRF) vulnerability in Drupal 5.x prior to 5.8 and 6.x prior to 6.3 allows remote malicious users to perform administrative actions via vectors involving deletion of "translated strings."
Drupal Drupal
Fedoraproject Fedora 8
Fedoraproject Fedora 9
NA
CVE-2008-3221
Cross-site request forgery (CSRF) vulnerability in Drupal 6.x prior to 6.3 allows remote malicious users to perform administrative actions via vectors involving deletion of OpenID identities.
Drupal Drupal
Fedoraproject Fedora 8
Fedoraproject Fedora 9
NA
CVE-2008-3222
Session fixation vulnerability in Drupal 5.x prior to 5.9 and 6.x prior to 6.3, when contributed modules "terminate the current request during a login event," allows remote malicious users to hijack web sessions via unknown vectors.
Drupal Drupal
Fedoraproject Fedora 8
Fedoraproject Fedora 9
NA
CVE-2008-3223
SQL injection vulnerability in the Schema API in Drupal 6.x prior to 6.3 allows remote malicious users to execute arbitrary SQL commands via vectors related to "an inappropriate placeholder for 'numeric' fields."
Drupal Drupal
Fedoraproject Fedora 8
Fedoraproject Fedora 9
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-30310
CVE-2024-21683
CVE-2024-22187
chrome
deserialization
XPath injection
CVE-2024-27842
denial of service
CVE-2024-24851
google
CVE-2024-35400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6