Description

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."

Remediation

References

CVE-2005-1871

Related Vulnerabilities

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11822)

phpMyFAQ Improper Privilege Management Vulnerability (CVE-2023-1762)

Drupal Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') Vulnerability (CVE-2007-5595)

Moodle Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-26047)

WordPress Plugin Download Plugin Arbitrary Directory Download (1.0.1)

Severity

High

Classification

CVE-2005-1871

Tags

Missing Update Known Vulnerabilities