Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

CMS

Drupal

Drupal is an open-source platform and content management system for building dynamic web sites offering a broad range of features and services including user administration publishing workflow discussion capabilities news aggregation metadata functionalities using controlled vocabularies and XML publishing for content sharing purposes.

Official Site:

https://www.drupal.org/

Severity Summary:

Critical: 50 High: 116 Medium: 469 Low: 32
Reference
Title
Severity
CVE-2020-13667
Drupal Incorrect Default Permissions Vulnerability
Medium
CVE-2020-13662
Drupal URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
CVE-2008-3218
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2008-2771
Drupal Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2008-3661
Drupal Other Vulnerability
Medium
CVE-2009-2372
Drupal Improper Control of Generation of Code (Code Injection) Vulnerability
Medium
CVE-2009-2374
Drupal Credentials Management Errors Vulnerability
Medium
CVE-2008-1133
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2014-2983
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2014-9016
Drupal Vulnerability
Medium
CVE-2019-10909
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2007-0136
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2007-0626
Drupal Vulnerability
Medium
CVE-2007-5594
Drupal Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2007-5593
Drupal Improper Control of Generation of Code (Code Injection) Vulnerability
Medium
CVE-2008-1729
Drupal Vulnerability
Medium
CVE-2013-6389
Drupal Core 7.x Multiple Vulnerabilities
Medium
CVE-2013-6385
Drupal Core 7.x Multiple Vulnerabilities
Medium
CVE-2013-6386
Drupal Core 6.x Multiple Vulnerabilities
Medium
CVE-2008-4792
Drupal Core 5.x Multiple Security Bypass Vulnerabilities
Medium
CVE-2008-3744
Drupal Core 5.x Multiple Vulnerabilities
Medium
CVE-2008-3742
Drupal Core 5.x Multiple Vulnerabilities
Medium
CVE-2008-3741
Drupal Core 5.x Multiple Vulnerabilities
Medium
CVE-2008-3740
Drupal Core 5.x Multiple Vulnerabilities
Medium
CVE-2008-3745
Drupal Core 6.x Multiple Vulnerabilities
Medium
CVE-2008-3744
Drupal Core 6.x Multiple Vulnerabilities
Medium
CVE-2008-3743
Drupal Core 6.x Multiple Vulnerabilities
Medium
CVE-2008-3742
Drupal Core 6.x Multiple Vulnerabilities
Medium
CVE-2008-3741
Drupal Core 6.x Multiple Vulnerabilities
Medium
CVE-2008-3740
Drupal Core 6.x Multiple Vulnerabilities
Medium