Unscored DSA-958-1 3 CVEs

drupal - several

Published Jan 27, 2006 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.1	drupal	4.5.3-5

Vulnerabilities 3

Unscored —

CVE-2005-3973

Multiple cross-site scripting (XSS) vulnerabilities in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allow remote …

Dec 3, 2005
Unscored —

CVE-2005-3974

Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when running on PHP5, does not correctly enforce user privileges, w…

Dec 3, 2005
Unscored —

CVE-2005-3975

Interpretation conflict in file.inc in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allows remote authenticated u…

Dec 3, 2005