Drupal 6.28
Approved changes feed: RSS · Atom
cpe:2.3:a:drupal:drupal:6.28:*:*:*:*:*:*:*
part: a version: 6.28 update: *
| Vendor | Drupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de) |
|---|---|
| Product | Drupal (612296c4-e720-5b7c-a84e-56df4c337089) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:drupal/drupal |
purl2cpe | 2026-06-01 10:11:36.227962 |
pkg:github/drupal/drupal |
purl2cpe | 2026-06-01 10:11:36.227963 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-3171 |
vulnerable | 2026-06-08 05:07:44.931847 |
Details available
Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code via vectors related to session data truncation.
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:57.481Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3169 |
vulnerable | 2026-06-08 05:07:44.843967 |
Details available
The User module in Drupal 6.x before 6.38 and 7.x before 7.43 allows remote attackers to gain privileges by leveraging contributed or custom code that calls the user_save function with an explicit category and loads all roles into the array.
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:57.511Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3168 |
vulnerable | 2026-06-08 05:07:44.841051 |
Details available
The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administrators for requests that download and run files with arbitrary JSON-encoded content, aka a "reflected file download vulnerability."
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:57.973Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3167 |
vulnerable | 2026-06-08 05:07:44.839228 |
Details available
Open redirect vulnerability in the drupal_goto function in Drupal 6.x before 6.38, when used with PHP before 5.4.7, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a double-encoded URL in the "destination" parameter.
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:58.013Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3166 |
vulnerable | 2026-06-08 05:07:44.837579 |
Details available
CRLF injection vulnerability in the drupal_set_header function in Drupal 6.x before 6.38, when used with PHP before 5.1.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by leveraging a module that allows user-submitted data to appear in HTTP headers.
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:58.184Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3165 |
vulnerable | 2026-06-08 05:07:44.836099 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3164 |
vulnerable | 2026-06-08 05:07:44.809815 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3163 |
vulnerable | 2026-06-08 05:07:44.793585 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6661 |
vulnerable | 2026-06-08 05:06:52.857456 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6660 |
vulnerable | 2026-06-08 05:06:52.854740 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6658 |
vulnerable | 2026-06-08 05:06:52.818344 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-3234 |
vulnerable | 2026-06-08 05:06:37.702239 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2750 |
vulnerable | 2026-06-08 05:06:35.756059 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2749 |
vulnerable | 2026-06-08 05:06:35.722775 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-5267 |
vulnerable | 2026-06-08 05:05:47.375789 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-5266 |
vulnerable | 2026-06-08 05:05:47.373303 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-5265 |
vulnerable | 2026-06-08 05:05:47.356949 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-5021 |
vulnerable | 2026-06-08 05:05:46.684079 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-5019 |
vulnerable | 2026-06-08 05:05:46.678610 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1475 |
vulnerable | 2026-06-08 05:05:24.769111 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6386 |
vulnerable | 2026-06-08 05:04:56.377611 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6385 |
vulnerable | 2026-06-08 05:04:56.354968 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.