Description

Unknown vulnerability in Drupal 4.5.0 through 4.5.3, 4.6.0, and 4.6.1 allows remote attackers to execute arbitrary PHP code via a public comment or posting.

Remediation

References

CVE-2005-2106

Related Vulnerabilities

Jenkins CVE-2018-1000408 Vulnerability (CVE-2018-1000408)

Oracle JRE CVE-2014-0453 Vulnerability (CVE-2014-0453)

WordPress Plugin Classified Listing Store & Membership Cross-Site Scripting (1.4.19)

Dot CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-18875)

MySQL CVE-2019-2738 Vulnerability (CVE-2019-2738)

Severity

Medium

Classification

CVE-2005-2106

Tags

Missing Update Known Vulnerabilities