CVE-2006-5477: Low severity Drupal Drupal vulnerability
Published Oct 24, 2006
·Updated
Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allows form submissions to be redirected, which allows remote attackers to obtain arbitrary form information via a crafted URL.
Affected Software
14 affected components
Drupal Drupal=4.6.0
Drupal Drupal=4.6.5
Drupal Drupal=4.7.2
Drupal Drupal=4.6.9
Drupal Drupal=4.6.2
Drupal Drupal=4.6.8
Drupal Drupal=4.7.3
Drupal Drupal=4.6.3
Drupal Drupal=4.6.4
Drupal Drupal=4.7.0
Drupal Drupal=4.6.7
Drupal Drupal=4.6.1
Drupal Drupal=4.7.1
Drupal Drupal=4.6.6
Remediation
Patch Available
Patch Available
Patch Available
Event History
Oct 24, 2006
CVE Published
08:07 PM
Data Sourced
via NVD·08:07 PM
RemedyDescriptionSeverityAffected Software
Oct 25, 2006
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-5477?
CVE-2006-5477 is classified as a moderate severity vulnerability.
2
What versions are affected by CVE-2006-5477?
CVE-2006-5477 affects Drupal versions 4.6.x before 4.6.10 and 4.7.x before 4.7.4.
3
How do I fix CVE-2006-5477?
To fix CVE-2006-5477, update Drupal to version 4.6.10 or 4.7.4 or later.
4
What kind of attacks can CVE-2006-5477 facilitate?
CVE-2006-5477 allows attackers to obtain arbitrary form information via crafted URLs.
5
Is CVE-2006-5477 still a concern for my Drupal site?
If your site is running an affected version of Drupal, CVE-2006-5477 remains a concern until patched.