Vendor/product archive

drupal / project CVEs

Beta · best-effort

4 CVEs tagged to drupal / project — 0 Critical, 1 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to drupal vendor archive

CVE-2007-4436

Published Aug 20, 2007

The Drupal Project module before 5.x-1.0, 4.7.x-2.3, and 4.7.x-1.3 and Project issue tracking module before 5.x-1.0, 4.7.x-2.4, and 4.7.x-1.4 do not properly enforce permissions,…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2007-0534

Published Jan 26, 2007

Multiple cross-site scripting (XSS) vulnerabilities in the (1) Project issue tracking 4.7.0 through 5.x before 20070123 and (2) Project 4.6.0 through 5.x before 20070123 modules f…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2007-0505

Published Jan 26, 2007

Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before 20070123, a module for Drupal, allows remote authenticated users to execute arbitrary…

CVSS 8.5 · High

Vendor/product tagsBeta · best-effort

CVE-2007-0506

Published Jan 26, 2007

The project_issue_access function in the Project issue tracking 4.7.0 through 5.x before 20070123 module for Drupal allows remote authenticated users to bypass other access contro…

CVSS 6.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1