Description

Unspecified vulnerability in Drupal before 4.6.11, and 4.7 before 4.7.5, when MySQL is used, allows remote authenticated users to cause a denial of service by poisoning the page cache via unspecified vectors, which triggers erroneous 404 HTTP errors for pages that exist.

Remediation

References

CVE-2007-0124

Related Vulnerabilities

RubyGems Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2018-1000073)

WordPress Plugin Simple JWT Login-Login and Register to WordPress using JWT Cross-Site Request Forgery (3.2.0)

WordPress Plugin Cookie Information-Free GDPR Consent Solution Privilege Escalation (1.4.2)

PrestaShop Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-19126)

CubeCart Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-47675)

Severity

Low

Classification

CVE-2007-0124

Tags

Missing Update Known Vulnerabilities