Description
Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code via vectors related to session data truncation.
Remediation
References
Related Vulnerabilities
SharePoint CVE-2022-38009 Vulnerability (CVE-2022-38009)
Python NULL Pointer Dereference Vulnerability (CVE-2019-5010)
WordPress Plugin SlickQuiz Multiple Vulnerabilities (1.3.7.1)
WebLogic CVE-2018-1313 Vulnerability (CVE-2018-1313)
Apache HTTP Server Exposure of Resource to Wrong Sphere Vulnerability (CVE-2026-42535)