Skip to content
OpenAdvisories
Unscored DSA-1930-1 3 CVEs

drupal6 - several vulnerabilities

Published Nov 7, 2009 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 drupal6 6.6-3lenny3

Vulnerabilities 3

  • Unscored —

    Drupal 6.x before 6.13 does not prevent users from modifying user signatures after the associated comment format has be…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Forum module in Drupal 6.x before 6.13 allows remote attackers to injec…

  • Unscored —

    Drupal 5.x before 5.19 and 6.x before 6.13 does not properly sanitize failed login attempts for pages that contain a so…