Description

Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8, when menu.module is used to create a menu item, does not implement access control for the page that is referenced, which might allow remote attackers to access administrator pages.

Remediation

References

CVE-2006-1227

Related Vulnerabilities

WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Cross-Site Scripting (1.16.10)

WordPress Plugin Happy Addons for Elementor Cross-Site Scripting (2.23.0)

Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-2949)

XWiki Incorrect Authorization Vulnerability (CVE-2021-32620)

WordPress Plugin iCopyright Toolbar 'icopyright_xml.php' SQL Injection (1.1.4)

Severity

Medium

Classification

CVE-2006-1227

Tags

Missing Update Known Vulnerabilities