Description
Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code via vectors related to session data truncation.
Remediation
References
Related Vulnerabilities
MySQL CVE-2019-2495 Vulnerability (CVE-2019-2495)
WordPress 5.3.x Multiple Vulnerabilities (5.3 - 5.3.12)
Internet Information Services Other Vulnerability (CVE-1999-0737)
Magento CVE-2021-36021 Vulnerability (CVE-2021-36021)
WordPress Plugin SEO Redirection-301 Redirect Manager Cross-Site Scripting (6.3)