- EPSS 4.82%
- Veröffentlicht 03.12.2005 19:03:00
- Zuletzt bearbeitet 16.06.2026 22:17:59
Interpretation conflict in file.inc in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF or JPEG file extension, which causes the HTML to be execu...
CVE-2005-1921
- EPSS 79.07%
- Veröffentlicht 05.07.2005 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:13:55
Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) Mail...
- EPSS 3.2%
- Veröffentlicht 05.07.2005 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:14:15
Unknown vulnerability in Drupal 4.5.0 through 4.5.3, 4.6.0, and 4.6.1 allows remote attackers to execute arbitrary PHP code via a public comment or posting.
CVE-2005-1871
- EPSS 1.62%
- Veröffentlicht 09.06.2005 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:13:50
Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."
CVE-2005-0682
- EPSS 1.24%
- Veröffentlicht 02.05.2005 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:11:34
Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via certain inputs.
CVE-2002-1806
- EPSS 3.54%
- Veröffentlicht 31.12.2002 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:00:00
Cross-site scripting (XSS) vulnerability in Drupal 4.0.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.