Drupal6 - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2019-11-07.

Products

• Drupal6 - 3 CVEs

Newest CVEs of Drupal6

• CVE-2010-2473 - CVSS 6.5 (medium), 2019-11-07: Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user with an open session that was blocked…
• CVE-2010-2472 - CVSS 4.8 (medium), 2019-11-07: Locale module and dependent contributed modules in Drupal 6.x before 6.16 and 5.x before version 5.22 do not sanitize the display of language codes, native…
• CVE-2010-2250 - CVSS 6.1 (medium), 2019-11-07: Drupal 5.x and 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL and perform a…