Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
drupal vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2012-1589
Open redirect vulnerability in the Form API in Drupal 7.x prior to 7.13 allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via crafted parameters in a destination URL.
Drupal Drupal 7.0
Drupal Drupal 7.8
Drupal Drupal 7.7
Drupal Drupal 7.6
Drupal Drupal 7.5
Drupal Drupal 7.12
Drupal Drupal 7.11
Drupal Drupal 7.4
Drupal Drupal 7.3
Drupal Drupal 7.10
Drupal Drupal 7.9
Drupal Drupal 7.2
Drupal Drupal 7.1
Drupal Drupal 7.x-dev
NA
CVE-2007-4064
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x prior to 5.2, and 4.7.x prior to 4.7.7, (1) allow remote malicious users to inject arbitrary web script or HTML via "some server variables," including PHP_SELF; and (2) allow remote authenticated administ...
Drupal Drupal 4.7.4
Drupal Drupal 4.7.5
Drupal Drupal 4.7.0
Drupal Drupal 4.7.1
Drupal Drupal 5.0
Drupal Drupal 5.1
Drupal Drupal 4.7.2
Drupal Drupal 4.7.3
Drupal Drupal 4.7
Drupal Drupal 4.7.6
Drupal Drupal 4.7 Rev1.15
NA
CVE-2006-2831
Drupal 4.6.x prior to 4.6.8 and 4.7.x prior to 4.7.2, when running under certain Apache configurations such as when FileInfo overrides are disabled within .htaccess, allows remote malicious users to execute arbitrary code by uploading a file with multiple extensions, a variant of...
Drupal Drupal 4.6.0
Drupal Drupal 4.6.1
Drupal Drupal 4.7.1
Drupal Drupal 4.6
Drupal Drupal 4.6.6
Drupal Drupal 4.6.7
Drupal Drupal 4.7.0
Drupal Drupal 4.6.2
Drupal Drupal 4.6.3
Drupal Drupal 4.6.4
Drupal Drupal 4.6.5
NA
CVE-2006-2832
Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x prior to 4.6.8 and 4.7.x prior to 4.7.2 allows remote malicious users to inject arbitrary web script or HTML via the uploaded filename.
Drupal Drupal 4.6.5
Drupal Drupal 4.6.6
Drupal Drupal 4.6.3
Drupal Drupal 4.6.4
Drupal Drupal 4.6
Drupal Drupal 4.6.0
Drupal Drupal 4.6.7
Drupal Drupal 4.7.0
Drupal Drupal 4.6.1
Drupal Drupal 4.6.2
Drupal Drupal 4.7.1
NA
CVE-2006-2260
Cross-site scripting (XSS) vulnerability in the project module (project.module) in Drupal 4.5 and 4.6 allows remote malicious users to inject arbitrary web script or HTML via unknown attack vectors.
Drupal Drupal 4.5
Drupal Drupal 4.6.2
Drupal Drupal 4.6.3
Drupal Drupal 4.6
Drupal Drupal 4.6.1
Drupal Drupal 4.5.1
Drupal Drupal 4.5.2
Drupal Drupal 4.5.3
Drupal Drupal 4.5.4
Drupal Drupal 4.5.5
NA
CVE-2005-3973
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 4.5.0 up to and including 4.5.5 and 4.6.0 up to and including 4.6.3 allow remote malicious users to inject arbitrary web script or HTML via various HTML tags and values, such as the (1) legend tag and the value paramet...
Drupal Drupal 4.5.0
Drupal Drupal 4.5.1
Drupal Drupal 4.6.3
Drupal Drupal 4.5.4
Drupal Drupal 4.5.5
Drupal Drupal 4.6.0
Drupal Drupal 4.6.1
Drupal Drupal 4.6.2
Drupal Drupal 4.5.2
Drupal Drupal 4.5.3
NA
CVE-2005-3974
Drupal 4.5.0 up to and including 4.5.5 and 4.6.0 up to and including 4.6.3, when running on PHP5, does not correctly enforce user privileges, which allows remote malicious users to bypass the "access user profiles" permission.
Drupal Drupal 4.6
Drupal Drupal 4.6.1
Drupal Drupal 4.5.2
Drupal Drupal 4.5.3
Drupal Drupal 4.5.4
Drupal Drupal 4.5.5
Drupal Drupal 4.5
Drupal Drupal 4.5.1
Drupal Drupal 4.6.2
Drupal Drupal 4.6.3
NA
CVE-2005-3975
Interpretation conflict in file.inc in Drupal 4.5.0 up to and including 4.5.5 and 4.6.0 up to and including 4.6.3 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF or JPEG file extension, which causes the HTML to be executed by...
Drupal Drupal 4.5.3
Drupal Drupal 4.5.4
Drupal Drupal 4.5.0
Drupal Drupal 4.6.1
Drupal Drupal 4.6.2
Drupal Drupal 4.6.3
Drupal Drupal 4.5.1
Drupal Drupal 4.5.2
Drupal Drupal 4.5.5
Drupal Drupal 4.6.0
NA
CVE-2012-0827
The File module in Drupal 7.x prior to 7.11, when using unspecified field access modules, allows remote authenticated users to read arbitrary private files that are associated with restricted fields via unspecified vectors.
Drupal Drupal 7.4
Drupal Drupal 7.5
Drupal Drupal 7.6
Drupal Drupal 7.7
Drupal Drupal 7.0
Drupal Drupal 7.3
Drupal Drupal 7.8
Drupal Drupal 7.x-dev
Drupal Drupal 7.10
Drupal Drupal 7.2
Drupal Drupal 7.9
Drupal Drupal 7.1
NA
CVE-2006-2742
SQL injection vulnerability in Drupal 4.6.x prior to 4.6.7 and 4.7.0 allows remote malicious users to execute arbitrary SQL commands via the (1) count and (2) from variables to (a) database.mysql.inc, (b) database.pgsql.inc, and (c) database.mysqli.inc.
Drupal Drupal 4.6.5
Drupal Drupal 4.6.6
Drupal Drupal 4.6.3
Drupal Drupal 4.6.4
Drupal Drupal 4.6
Drupal Drupal 4.6.0
Drupal Drupal 4.7.0
Drupal Drupal 4.6.1
Drupal Drupal 4.6.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTI
CVE-2024-35863
CVE-2024-35910
man-in-the-middle
CVE-2024-35912
CVE-2024-25742
LFI
CVE-2024-32002
CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
6
7
8
9
10
NEXT »