PR
Product
Project
by Drupal · last CVE Aug 20, 2007
4
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch

Add Project to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2007-4436
–
1%
Aug 20
The Drupal Project module before 5.x-1.0, 4.7.x-2.3, and 4.7.x-1.3 and Project issue tracking module before 5.x-1.0, 4.7.x-2.4, and 4.7.x-1.4 do not properly enforce permissions,…
Affected: through 4.7_1.1; through 4.7_2.1; through 5.0
CVE-2007-0534
–
1%
Jan 26
Multiple cross-site scripting (XSS) vulnerabilities in the (1) Project issue tracking 4.7.0 through 5.x before 20070123 and (2) Project 4.6.0 through 5.x before 20070123 modules…
Affected: through 5; 4.6.0
CVE-2007-0505
–
3%
Jan 26
Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before 20070123, a module for Drupal, allows remote authenticated users to execute arbitrary…
Affected: 4.6; 4.6_1.1; 4.7; 4.7_1.1; 4.7_2.1; 5.0
CVE-2007-0506
–
1%
Jan 26
The project_issue_access function in the Project issue tracking 4.7.0 through 5.x before 20070123 module for Drupal allows remote authenticated users to bypass other access…
Affected: 4.6; 4.6_1.1; 4.7; 4.7_1.1; 4.7_2.1; 5.0
Showing 4