Drupal

Drupal

266 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4

CVE-2005-3975

  • EPSS 0.82%
  • Published 03.12.2005 19:03:00
  • Last modified 03.04.2025 01:03:51

Interpretation conflict in file.inc in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF or JPEG file extension, which causes the HTML to be execu...

7.5

CVE-2005-1921

  • EPSS 86.9%
  • Published 05.07.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) Mail...

5

CVE-2005-2106

  • EPSS 5.24%
  • Published 05.07.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

Unknown vulnerability in Drupal 4.5.0 through 4.5.3, 4.6.0, and 4.6.1 allows remote attackers to execute arbitrary PHP code via a public comment or posting.

7.5

CVE-2005-1871

  • EPSS 0.74%
  • Published 09.06.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."

4.3

CVE-2005-0682

  • EPSS 0.36%
  • Published 02.05.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via certain inputs.

4.3

CVE-2002-1806

Exploit
  • EPSS 2.71%
  • Published 31.12.2002 05:00:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in Drupal 4.0.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.