Unscored DTSA-156-1 6 CVEs

drupal5 - multiple vulnerabilities

Published Aug 17, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 5.0	drupal5	5.9-1.1+lenny1

Vulnerabilities 6

Unscored —

CVE-2008-3740

Cross-site scripting (XSS) vulnerability in the output filter in Drupal 5.x before 5.10 and 6.x before 6.4 allows remot…

Aug 27, 2008
Unscored —

CVE-2008-3741

The private filesystem in Drupal 5.x before 5.10 and 6.x before 6.4 trusts the MIME type sent by a web browser, which a…

Aug 27, 2008
Unscored —

CVE-2008-3742

Unrestricted file upload vulnerability in the BlogAPI module in Drupal 5.x before 5.10 and 6.x before 6.4 allows remote…

Aug 27, 2008
Unscored —

CVE-2008-3743

Multiple cross-site request forgery (CSRF) vulnerabilities in forms in Drupal 6.x before 6.4 allow remote attackers to …

Aug 27, 2008
Unscored —

CVE-2008-3744

Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.10 and 6.x before 6.4 allow remote at…

Aug 27, 2008
Unscored —

CVE-2008-3745

The Upload module in Drupal 6.x before 6.4 allows remote authenticated users to edit nodes, delete files, and download …

Aug 27, 2008