4 matches found
CVE-2008-6176
No description is available for this CVE...
CVE-2008-6171
includes/bootstrap.inc in Drupal 5.x before 5.12 and 6.x before 6.6, when the server is configured for "IP-based virtual hosts," allows remote attackers to include and execute arbitrary files via the HTTP Host header...
CVE-2008-6171
includes/bootstrap.inc in Drupal 5.x before 5.12 and 6.x before 6.6, when the server is configured for "IP-based virtual hosts," allows remote attackers to include and execute arbitrary files via the HTTP Host header...
CVE-2008-6171
CVE-2008-6171 affects Drupal 5.x before 5.12 and 6.x before 6.6. When a server is configured for IP-based virtual hosts, the application may include and execute arbitrary files via the HTTP Host header, enabling remote code execution. The underlying issue is an insecure file inclusion triggered b...