Approved changes feed: RSS · Atom

cpe:2.3:a:drupal:drupal:6.0:dev:*:*:*:*:*:*

part: a version: 6.0 update: dev

VendorDrupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de)
ProductDrupal (612296c4-e720-5b7c-a84e-56df4c337089)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:drupal/drupal purl2cpe 2026-06-01 10:11:36.219523
pkg:github/drupal/drupal purl2cpe 2026-06-01 10:11:36.219524

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-3171 vulnerable 2026-06-08 05:07:44.931330 Details available
Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code via vectors related to session data truncation.
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:57.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3169 vulnerable 2026-06-08 05:07:44.843440 Details available
The User module in Drupal 6.x before 6.38 and 7.x before 7.43 allows remote attackers to gain privileges by leveraging contributed or custom code that calls the user_save function with an explicit category and loads all roles into the array.
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:57.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3168 vulnerable 2026-06-08 05:07:44.840520 Details available
The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administrators for requests that download and run files with arbitrary JSON-encoded content, aka a "reflected file download vulnerability."
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:57.973Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3167 vulnerable 2026-06-08 05:07:44.838398 Details available
Open redirect vulnerability in the drupal_goto function in Drupal 6.x before 6.38, when used with PHP before 5.4.7, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a double-encoded URL in the "destination" parameter.
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:58.013Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3166 vulnerable 2026-06-08 05:07:44.836979 Details available
CRLF injection vulnerability in the drupal_set_header function in Drupal 6.x before 6.38, when used with PHP before 5.1.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by leveraging a module that allows user-submitted data to appear in HTTP headers.
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:58.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3165 vulnerable 2026-06-08 05:07:44.835453 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3164 vulnerable 2026-06-08 05:07:44.806776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3163 vulnerable 2026-06-08 05:07:44.772968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6661 vulnerable 2026-06-08 05:06:52.856948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6660 vulnerable 2026-06-08 05:06:52.852767 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6658 vulnerable 2026-06-08 05:06:52.801362 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3234 vulnerable 2026-06-08 05:06:37.701690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2750 vulnerable 2026-06-08 05:06:35.755517 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2749 vulnerable 2026-06-08 05:06:35.702018 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5267 vulnerable 2026-06-08 05:05:47.375201 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5266 vulnerable 2026-06-08 05:05:47.372765 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5265 vulnerable 2026-06-08 05:05:47.356392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5021 vulnerable 2026-06-08 05:05:46.683486 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5019 vulnerable 2026-06-08 05:05:46.661631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1475 vulnerable 2026-06-08 05:05:24.752845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6386 vulnerable 2026-06-08 05:04:56.376989 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6385 vulnerable 2026-06-08 05:04:56.336791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0245 vulnerable 2026-06-08 05:03:46.444332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0244 vulnerable 2026-06-08 05:03:46.423593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5653 vulnerable 2026-06-08 05:02:57.796881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5652 vulnerable 2026-06-08 05:02:57.794854 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5651 vulnerable 2026-06-08 05:02:57.772170 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2922 vulnerable 2026-06-08 05:02:07.200985 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0826 vulnerable 2026-06-08 05:00:45.675528 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0825 vulnerable 2026-06-08 05:00:45.641064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3686 vulnerable 2026-06-08 04:55:16.280902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3685 vulnerable 2026-06-08 04:55:16.279858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3094 vulnerable 2026-06-08 04:55:12.691397 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3093 vulnerable 2026-06-08 04:55:12.690119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3092 vulnerable 2026-06-08 04:55:12.688553 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3091 vulnerable 2026-06-08 04:55:12.654053 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6752 vulnerable 2026-06-08 04:50:09.791475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.