VULNERABILITY INTELLIGENCE

CVE-2006-1227

CVSS score4.6 NONE
EPSS probability1.00%
CISA KEVNot currently listed
Published2006-03-14
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8, when menu.module is used to create a menu item, does not implement access control for the page that is referenced, which might allow remote attackers to access administrator pages.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references