Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2005-1871

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."

  • Published: Jun 9, 2005
  • Updated: Nov 9, 2025
  • CVE: CVE-2005-1871
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
Composer icon drupal / drupal 4.6.0 4.6.0.x
Composer icon drupal / drupal 4.5.0 4.5.0.x
Composer icon drupal / drupal 4.5.2 4.5.2.x
Composer icon drupal / drupal 4.4.1 4.4.1.x
Composer icon drupal / drupal 4.5.1 4.5.1.x
Composer icon drupal / drupal 4.4.2 4.4.2.x
Composer icon drupal / drupal 4.4.0 4.4.0.x