PT-2006-6192 · Drupal · Drupal

Frederic Marand · Publicado 2006-10-24 · Atualizado 2018-10-17 · CVE-2006-5477

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Drupal versions 4.6.x before 4.6.10 Drupal versions 4.7.x before 4.7.4

Description The issue allows form submissions to be redirected, enabling remote attackers to obtain arbitrary form information via a crafted URL.

Recommendations For versions 4.6.x, update to version 4.6.10 or later. For versions 4.7.x, update to version 4.7.4 or later.

Correção

Identificadores relacionados

CVE-2006-5477

Produtos afetados

Drupal

Referências · 10

• https://nvd.nist.gov/vuln/detail/CVE-2006-5477 · Nota de Segurança
• http://securityfocus.com/archive/1/449200/100/0/threaded · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5477 · Nota
• http://vupen.com/english/advisories/2006/4120 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29682 · Nota
• http://openpkg.org/security/advisories/OpenPKG-SA-2006.025-drupal.html · Aviso do Fabricante
• http://securityfocus.com/bid/20631 · Correção
• http://securityreason.com/securityalert/1764 · Nota
• http://drupal.org/node/88828 · Aviso do Fabricante
• http://secunia.com/advisories/22486 · Aviso do Fabricante