Skip to content
OpenAdvisories
Unscored DSA-1125 5 CVEs

drupal - several

Published Jul 26, 2006 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 drupal 4.5.3-6.1sarge1

Vulnerabilities 5

  • Unscored —
    CVE-2006-2742

    SQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2006-2743 Public exploit EPSS 11%

    Drupal 4.6.x before 4.6.7 and 4.7.0, when running on Apache with mod_mime, does not properly handle files with multiple…

  • Unscored —
    CVE-2006-2831

    Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2, when running under certain Apache configurations such as when FileInf…

  • Unscored —
    CVE-2006-2832

    Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x before 4.6.8 and 4.7.x be…

  • Unscored —
    CVE-2006-2833

    Cross-site scripting (XSS) vulnerability in the taxonomy module in Drupal 4.6.8 and 4.7.2 allows remote attackers to in…