Skip to content
OpenAdvisories
Unscored DSA-2016-1 4 CVEs

drupal6 - several vulnerabilities

Published Mar 13, 2010 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 drupal6 6.6-3lenny5

Vulnerabilities 4

  • Unscored —

    Drupal 5.x and 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attac…

  • Unscored —

    Drupal versions 5.x and 6.x has open redirection

  • Unscored —

    Locale module and dependent contributed modules in Drupal 6.x before 6.16 and 5.x before version 5.22 do not sanitize t…

  • Unscored —

    Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user wi…