Approved changes feed: RSS · Atom
cpe:2.3:a:drupal:drupal:6.0:rc-3:*:*:*:*:*:*
part: a version: 6.0 update: rc-3
| Vendor | Drupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de) |
|---|---|
| Product | Drupal (612296c4-e720-5b7c-a84e-56df4c337089) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:drupal/drupal |
purl2cpe | 2026-06-01 10:11:36.224737 |
pkg:github/drupal/drupal |
purl2cpe | 2026-06-01 10:11:36.224739 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-1475 |
vulnerable | 2026-06-08 05:05:24.755080 |
Details available
The OpenID module in Drupal 6.x before 6.30 and 7.x before 7.26 allows remote OpenID users to authenticate as other users via unspecified vectors.
Published: 2014-01-24T18:00:00.000Z
Updated: 2024-08-06T09:42:35.380Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4370 |
vulnerable | 2026-06-08 04:51:48.266332 |
Details available
Cross-site scripting (XSS) vulnerability in the Menu module (modules/menu/menu.admin.inc) in Drupal Core 6.x before 6.15 allows remote authenticated users with permissions to create new menus to inject arbitrary web script or HTML via a menu description, which is not properly handled in the menu administration overview.
Published: 2009-12-21T16:00:00.000Z
Updated: 2024-08-07T07:01:20.179Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4369 |
vulnerable | 2026-06-08 04:51:48.258237 |
Details available
Cross-site scripting (XSS) vulnerability in the Contact module (modules/contact/contact.admin.inc or modules/contact/contact.module) in Drupal Core 5.x before 5.21 and 6.x before 6.15 allows remote authenticated users with "administer site-wide contact form" permissions to inject arbitrary web script or HTML via the contact category name.
Published: 2009-12-21T16:00:00.000Z
Updated: 2024-08-07T07:01:20.671Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2373 |
vulnerable | 2026-06-08 04:51:28.057190 |
Details available
Cross-site scripting (XSS) vulnerability in the Forum module in Drupal 6.x before 6.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2009-07-08T15:00:00.000Z
Updated: 2024-08-07T05:52:14.027Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1576 |
vulnerable | 2026-06-08 04:51:24.062681 |
Details available
Unspecified vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows user-assisted remote attackers to obtain sensitive information by tricking victims into visiting the front page of the site with a crafted URL and causing form data to be sent to an attacker-controlled site, possibly related to multiple / (slash) characters that are not properly handled by includes/bootstrap.inc, as demonstrated using the search box. NOTE: this vulnerability can be leveraged to conduct cross-site request forgery (CSRF) attacks.
Published: 2009-05-06T17:00:00.000Z
Updated: 2024-08-07T05:20:34.527Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1575 |
vulnerable | 2026-06-08 04:51:24.056286 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4789 |
vulnerable | 2026-06-08 04:50:48.177289 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6752 |
vulnerable | 2026-06-08 04:50:09.793321 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.