Drupal Other Vulnerability (CVE-2006-1227)

Description

Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8, when menu.module is used to create a menu item, does not implement access control for the page that is referenced, which might allow remote attackers to access administrator pages.

Remediation

References

CVE-2006-1227

Related Vulnerabilities

WordPress Plugin Social Tape Cross-Site Request Forgery (1.0)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-37391)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-3808)

Oracle JRE CVE-2013-2447 Vulnerability (CVE-2013-2447)

Joomla! Core 3.x.x Multiple Cross-Site Request Forgery Vulnerabilities (3.2.0 - 3.9.15)

Severity

Medium

Classification