Total vulnerabilities in the database
Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to obtain sensitive node titles by reading the menu.
CVSS v2:
CWEs: