Drupal — система управления контентом с открытым исходным кодом. На Drupal работает более миллиона сайтов — от личных блогов до сайтов компаний, политических партий и государственных организаций.
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 030
CVE-2008-4792
The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 does not properly validate unspecified content fields of an internal Drupal form, which allows remote authenticated users to bypass intended access restrictions via modified field values.
CVE-2008-4791
The user module in Drupal 5.x before 5.11 and 6.x before 6.5 might allow remote authenticated users to bypass intended login access rules and successfully login via unknown vectors.
CVE-2008-4789
The validation functionality in the core upload module in Drupal 6.x before 6.5 allows remote authenticated users to bypass intended access restrictions and "attach files to content," related to a "logic error."
CVE-2008-4791
The user module in Drupal 5.x before 5.11 and 6.x before 6.5 might all ...
CVE-2008-4793
The node module API in Drupal 5.x before 5.11 allows remote attackers ...
CVE-2008-4790
The core upload module in Drupal 5.x before 5.11 allows remote authent ...
CVE-2008-4789
The validation functionality in the core upload module in Drupal 6.x b ...
CVE-2008-4792
The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 d ...
CVE-2008-4792
The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 does not properly validate unspecified content fields of an internal Drupal form, which allows remote authenticated users to bypass intended access restrictions via modified field values.
CVE-2008-4790
The core upload module in Drupal 5.x before 5.11 allows remote authenticated users to bypass intended access restrictions and read "files attached to content" via unknown vectors.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2008-4792 The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 does not properly validate unspecified content fields of an internal Drupal form, which allows remote authenticated users to bypass intended access restrictions via modified field values. | CVSS2: 6 | 1% Низкий | около 18 лет назад |
| CVE-2008-4791 The user module in Drupal 5.x before 5.11 and 6.x before 6.5 might allow remote authenticated users to bypass intended login access rules and successfully login via unknown vectors. | CVSS2: 6 | 2% Низкий | около 18 лет назад |
| CVE-2008-4789 The validation functionality in the core upload module in Drupal 6.x before 6.5 allows remote authenticated users to bypass intended access restrictions and "attach files to content," related to a "logic error." | CVSS2: 6 | 1% Низкий | около 18 лет назад |
| CVE-2008-4791 The user module in Drupal 5.x before 5.11 and 6.x before 6.5 might all ... | CVSS2: 6 | 2% Низкий | около 18 лет назад |
| CVE-2008-4793 The node module API in Drupal 5.x before 5.11 allows remote attackers ... | CVSS2: 7.5 | 2% Низкий | около 18 лет назад |
| CVE-2008-4790 The core upload module in Drupal 5.x before 5.11 allows remote authent ... | CVSS2: 6 | 1% Низкий | около 18 лет назад |
| CVE-2008-4789 The validation functionality in the core upload module in Drupal 6.x b ... | CVSS2: 6 | 1% Низкий | около 18 лет назад |
| CVE-2008-4792 The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 d ... | CVSS2: 6 | 1% Низкий | около 18 лет назад |
 | CVE-2008-4792 The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 does not properly validate unspecified content fields of an internal Drupal form, which allows remote authenticated users to bypass intended access restrictions via modified field values. | CVSS2: 6 | 1% Низкий | около 18 лет назад |
| CVE-2008-4790 The core upload module in Drupal 5.x before 5.11 allows remote authenticated users to bypass intended access restrictions and read "files attached to content" via unknown vectors. | CVSS2: 6 | 1% Низкий | около 18 лет назад |
Уязвимостей на страницу