GCVE - cpe:2.3:a:drupal:drupal:5.1_rev1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:drupal:drupal:5.1_rev1.1:*:*:*:*:*:*:*

part: a version: 5.1_rev1.1 update: *

Vendor	Drupal (`5a354f1f-83c2-5c0e-b1bc-3ae1f55812de`)
Product	Drupal (`612296c4-e720-5b7c-a84e-56df4c337089`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:drupal/drupal`	purl2cpe	2026-06-01 10:11:36.212972
`pkg:github/drupal/drupal`	purl2cpe	2026-06-01 10:11:36.212974

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2373`	vulnerable	2026-06-08 04:51:28.056482	Details available Cross-site scripting (XSS) vulnerability in the Forum module in Drupal 6.x before 6.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2009-07-08T15:00:00.000Z Updated: 2024-08-07T05:52:14.027Z Open on db.gcve.eu Reference links http://drupal.org/node/507572 http://secunia.com/advisories/35681 http://osvdb.org/55524	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1576`	vulnerable	2026-06-08 04:51:24.062445	Details available Unspecified vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows user-assisted remote attackers to obtain sensitive information by tricking victims into visiting the front page of the site with a crafted URL and causing form data to be sent to an attacker-controlled site, possibly related to multiple / (slash) characters that are not properly handled by includes/bootstrap.inc, as demonstrated using the search box. NOTE: this vulnerability can be leveraged to conduct cross-site request forgery (CSRF) attacks. Published: 2009-05-06T17:00:00.000Z Updated: 2024-08-07T05:20:34.527Z Open on db.gcve.eu Reference links https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00108.html http://www.osvdb.org/54153 http://www.vbdrupal.org/forum/showthread.php?p=9953#post9953 http://www.vupen.com/english/advisories/2009/1216 http://secunia.com/advisories/34980	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1575`	vulnerable	2026-06-08 04:51:24.043227	Details available Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows remote attackers to inject arbitrary web script or HTML via crafted UTF-8 byte sequences before the Content-Type meta tag, which are treated as UTF-7 by Internet Explorer 6 and 7. Published: 2009-05-06T17:00:00.000Z Updated: 2024-08-07T05:20:35.050Z Open on db.gcve.eu Reference links https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00108.html http://www.osvdb.org/54152 http://www.vbdrupal.org/forum/showthread.php?p=9953#post9953 http://www.vupen.com/english/advisories/2009/1216 http://secunia.com/advisories/34980	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2999`	vulnerable	2026-06-08 04:50:32.790521	Details available Multiple SQL injection vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Published: 2008-07-03T17:47:00.000Z Updated: 2024-08-07T09:21:34.913Z Open on db.gcve.eu Reference links http://drupal.org/node/269479 http://www.securityfocus.com/bid/29677 https://exchange.xforce.ibmcloud.com/vulnerabilities/43010 http://secunia.com/advisories/30618	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2998`	not_vulnerable	2026-06-08 04:50:32.781312	Details available Multiple cross-site scripting (XSS) vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2008-07-03T17:47:00.000Z Updated: 2024-08-07T09:21:34.556Z Open on db.gcve.eu Reference links http://drupal.org/node/269479 http://www.securityfocus.com/bid/29677 https://exchange.xforce.ibmcloud.com/vulnerabilities/43008 http://secunia.com/advisories/30618	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0276`	vulnerable	2026-06-08 04:50:10.633626	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0273`	vulnerable	2026-06-08 04:50:10.622516	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0272`	vulnerable	2026-06-08 04:50:10.620726	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6752`	vulnerable	2026-06-08 04:50:09.773909	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6299`	vulnerable	2026-06-08 04:50:08.456545	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4063`	vulnerable	2026-06-08 04:49:55.622658	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.