Description

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."

Remediation

References

CVE-2005-1871

Related Vulnerabilities

WordPress Plugin Sign-up Sheets Cross-Site Scripting (1.0.13)

WordPress Plugin MP3-jPlayer Multiple Cross-Site Request Forgery Vulnerabilities (2.7.3)

phpMyAdmin Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2016-6609)

Jboss EAP Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2021-3642)

WordPress Plugin RegistrationMagic-User Registration with Custom Registration Forms Cross-Site Request Forgery (5.3.0.0)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2005-1871