Drupal — система управления контентом с открытым исходным кодом. На Drupal работает более миллиона сайтов — от личных блогов до сайтов компаний, политических партий и государственных организаций.

Drupal Brute force amplification attacks via XML-RPC

Drupal Open redirect vulnerability in the drupal_goto function

Drupal File upload access bypass and denial of service

Drupal arbitrary code execution

Drupal Users without "Administer comments" can set comment visibility on nodes they can edit

Drupal Cross-site scripting (XSS) vulnerability

Drupal Unprivileged access to config export

Drupal Saving user accounts can sometimes grant the user all roles

Drupal Views can allow unauthorized users to see Statistics information

Drupal Denial of service via transliterate mechanism