Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

CMS

Drupal

Drupal is an open-source platform and content management system for building dynamic web sites offering a broad range of features and services including user administration publishing workflow discussion capabilities news aggregation metadata functionalities using controlled vocabularies and XML publishing for content sharing purposes.

Official Site:

https://www.drupal.org/

Severity Summary:

Critical: 50 High: 116 Medium: 469 Low: 32
Reference
Title
Severity
CVE-2014-5267
Drupal Core 6.x Denial of Service
Medium
CVE-2014-5266
Drupal Core 6.x Denial of Service
Medium
CVE-2014-5265
Drupal Core 6.x Denial of Service
Medium
CVE-2014-5267
Drupal Core 7.x Denial of Service
Medium
CVE-2014-5266
Drupal Core 7.x Denial of Service
Medium
CVE-2014-5265
Drupal Core 7.x Denial of Service
Medium
CVE-2009-3479
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2014-9015
Drupal Core 6.x Session Hijacking
Medium
CVE-2014-9016
Drupal Core 7.x Multiple Vulnerabilities
Medium
CVE-2014-9015
Drupal Core 7.x Multiple Vulnerabilities
Medium
CVE-2015-2750
Drupal Core 6.x Multiple Vulnerabilities
Medium
CVE-2015-2749
Drupal Core 6.x Multiple Vulnerabilities
Medium
CVE-2015-2559
Drupal Core 6.x Multiple Vulnerabilities
Medium
CVE-2008-4789
Drupal Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2020-13672
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2013-6385
Drupal Core 6.x Multiple Vulnerabilities
Medium
CVE-2006-1227
Drupal Other Vulnerability
Medium
CVE-2008-3220
Drupal Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2008-3219
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2008-0272
Drupal Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2008-0273
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
SA-2007-029
Drupal User Deletion Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2002-1806
Drupal Other Vulnerability
Medium
CVE-2005-2106
Drupal Other Vulnerability
Medium
CVE-2005-3975
Drupal Other Vulnerability
Medium
CVE-2005-3974
Drupal Other Vulnerability
Medium
CVE-2005-3973
Drupal Other Vulnerability
Medium
CVE-2006-0070
Drupal Other Vulnerability
Medium
CVE-2006-1228
Drupal Improper Authentication Vulnerability
Medium
CVE-2006-1226
Drupal Other Vulnerability
Medium