CVE-2005-1871

Published: Jun 9, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."

Affected (7)

Products: Drupal: Drupal

Drupal

1 product

Drupal

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Drupal Drupal	Version 4.4.0
Drupal Drupal	Version 4.4.1
Drupal Drupal	Version 4.4.2
Drupal Drupal	Version 4.5.0
Drupal Drupal	Version 4.5.1
Drupal Drupal	Version 4.5.2
Drupal Drupal	Version 4.6.0