Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

CMS

Drupal

Drupal is an open-source platform and content management system for building dynamic web sites offering a broad range of features and services including user administration publishing workflow discussion capabilities news aggregation metadata functionalities using controlled vocabularies and XML publishing for content sharing purposes.

Official Site:

https://www.drupal.org/

Severity Summary:

Critical: 54 High: 119 Medium: 485 Low: 34
Reference
Title
Severity
CVE-2009-2372
Drupal Improper Control of Generation of Code (Code Injection) Vulnerability
Medium
CVE-2008-3661
Drupal Other Vulnerability
Medium
CVE-2020-13666
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2007-0136
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-13667
Drupal Incorrect Default Permissions Vulnerability
Medium
CVE-2020-13688
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-9281
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2018-14773
Drupal Vulnerability
Medium
CVE-2021-33829
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-41164
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2019-10909
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2007-0626
Drupal Vulnerability
Medium
CVE-2006-1228
Drupal Improper Authentication Vulnerability
Medium
SA-2007-029
Drupal User Deletion Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2006-0070
Drupal Other Vulnerability
Medium
CVE-2005-3973
Drupal Other Vulnerability
Medium
CVE-2005-3974
Drupal Other Vulnerability
Medium
CVE-2005-3975
Drupal Other Vulnerability
Medium
CVE-2005-2106
Drupal Other Vulnerability
Medium
CVE-2002-1806
Drupal Other Vulnerability
Medium
CVE-2008-3219
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2007-5594
Drupal Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2008-3220
Drupal Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2008-3221
Drupal Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2008-3222
Drupal Session Fixation Vulnerability
Medium
CVE-2008-3218
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2008-1729
Drupal Vulnerability
Medium
CVE-2007-5593
Drupal Improper Control of Generation of Code (Code Injection) Vulnerability
Medium
CVE-2009-2373
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2009-4066
Drupal Cross-Site Request Forgery (CSRF) Vulnerability
Medium