Skip to content
OpenAdvisories
Unscored DSA-1007-1 4 CVEs

drupal - several

Published Mar 17, 2006 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 drupal 4.5.3-6

Vulnerabilities 4

  • Unscored —

    CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject head…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to…

  • Unscored —

    Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8, when menu.module is used to create a menu item, does not implement ac…

  • Unscored —

    Session fixation vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to gain priv…