Description

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."

Remediation

References

CVE-2005-1871

Related Vulnerabilities

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-14631)

WordPress Plugin classyfrieds Arbitrary File Upload (3.8)

CubeCart Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-3904)

MySQL CVE-2021-2038 Vulnerability (CVE-2021-2038)

Oracle JRE CVE-2026-21932 Vulnerability (CVE-2026-21932)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2005-1871