CVE-2005-2106

Published: Jul 5, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Unknown vulnerability in Drupal 4.5.0 through 4.5.3, 4.6.0, and 4.6.1 allows remote attackers to execute arbitrary PHP code via a public comment or posting.

Affected (6)

Products: Drupal: Drupal

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Drupal Drupal	Version 4.5.0
Drupal Drupal	Version 4.5.1
Drupal Drupal	Version 4.5.2
Drupal Drupal	Version 4.5.3
Drupal Drupal	Version 4.6.0
Drupal Drupal	Version 4.6.1

References (10)

http://marc.info/?l=bugtraq&m=112015287827452&w=2

Source: cve@mitre.org

http://secunia.com/advisories/15872

Source: cve@mitre.org

PatchVendor Advisory

http://www.debian.org/security/2005/dsa-745

Source: cve@mitre.org

http://www.drupal.org/security/drupal-sa-2005-002/advisory.txt

Source: cve@mitre.org

http://www.securityfocus.com/bid/14110

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=112015287827452&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/15872

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.debian.org/security/2005/dsa-745

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.drupal.org/security/drupal-sa-2005-002/advisory.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/14110

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.