Drupal — система управления контентом с открытым исходным кодом. На Drupal работает более миллиона сайтов — от личных блогов до сайтов компаний, политических партий и государственных организаций.
Релизный цикл, информация об уязвимостях
График релизов
Количество 1 966
CVE-2005-1871
Unknown vulnerability in the privilege system in Drupal 4.4.0 through ...
CVE-2005-1871
Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."
CVE-2005-0682
Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via certain inputs.
CVE-2005-0682
Cross-site scripting (XSS) vulnerability in common.inc in Drupal befor ...
CVE-2005-0682
Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via certain inputs.
CVE-2002-1806
Cross-site scripting (XSS) vulnerability in Drupal 4.0.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2005-1871 Unknown vulnerability in the privilege system in Drupal 4.4.0 through ... | CVSS2: 7.5 | 1% Низкий | около 20 лет назад |
 | CVE-2005-1871 Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly." | CVSS2: 7.5 | 1% Низкий | около 20 лет назад |
 | CVE-2005-0682 Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via certain inputs. | CVSS2: 4.3 | 0% Низкий | около 20 лет назад |
| CVE-2005-0682 Cross-site scripting (XSS) vulnerability in common.inc in Drupal befor ... | CVSS2: 4.3 | 0% Низкий | около 20 лет назад |
| CVE-2005-0682 Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via certain inputs. | CVSS2: 4.3 | 0% Низкий | около 20 лет назад |
| CVE-2002-1806 Cross-site scripting (XSS) vulnerability in Drupal 4.0.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag. | CVSS2: 4.3 | 3% Низкий | больше 22 лет назад |
Уязвимостей на страницу