Description

Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to obtain sensitive node titles by reading the menu.

Remediation

References

CVE-2015-6661

Related Vulnerabilities

WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Unspecified Vulnerability (3.4.27.1)

Apache Tomcat Improper Input Validation Vulnerability (CVE-2026-41293)

WordPress Plugin FileBird-WordPress Media Library Folders & File Manager SQL Injection (4.7.3)

WordPress Plugin WP Smart Import: Import any XML File to WordPress Cross-Site Scripting (1.0.2)

XOOPS Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-4851)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2015-6661