Description

Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code via vectors related to session data truncation.

Remediation

References

CVE-2016-3171

Related Vulnerabilities

Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-1499)

Microsoft SQL Server Other Vulnerability (CVE-2002-1145)

MySQL CVE-2022-21589 Vulnerability (CVE-2022-21589)

WordPress Plugin Gravity Forms-Clockwork SMS Cross-Site Scripting (2.2)

WordPress Plugin Maps Widget for Google Maps-Google Maps Builder Cross-Site Scripting (2.30)

Severity

High

Classification

CVE-2016-3171 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities