Unscored CVE-2005-1871 EUVD-2005-1873GHSA-7pvf-533w-5xpj

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers t…

Published Jun 7, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."

References

17028 vdb-entry
15372 third-party-advisory
20050603 [DRUPAL-SA-2005-001] New Drupal release fixes critical security issue mailing-list
20050603 [DRUPAL-SA-2005-001] New Drupal release fixes critical security issue mailing-list