PT-2005-3045 · Drupal · Drupal

Kuba Zygmunt · Published 2005-07-01 · Updated 2016-10-18 · CVE-2005-2106

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Drupal versions 4.5.0 through 4.5.3 Drupal version 4.6.0 Drupal version 4.6.1

Description: A remote code execution issue in Drupal allows attackers to execute arbitrary PHP code via a public comment or posting.

Recommendations: For versions 4.5.0 through 4.5.3, update to a version outside of this range to mitigate the risk. For version 4.6.0, update to a version outside of this range to mitigate the risk. For version 4.6.1, update to a version outside of this range to mitigate the risk.

Exploit

Fix

Related Identifiers

CVE-2005-2106

DSA-745-1

Affected Products

Drupal

References · 8

• 🔥 https://exploit-db.com/exploits/1088 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-2106 · Security Note
• http://debian.org/security/2005/dsa-745 · Vendor Advisory
• http://secunia.com/advisories/15872 · Vendor Advisory
• http://drupal.org/security/drupal-sa-2005-002/advisory.txt · Note
• http://securityfocus.com/bid/14110 · Note
• http://marc.info/?l=bugtraq&m=112015287827452&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2106 · Note