| Max CVSS | 9.3 | Min CVSS | 9.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2008-6171 | 9.3 |
includes/bootstrap.inc in Drupal 5.x before 5.12 and 6.x before 6.6, when the server is configured for "IP-based virtual hosts," allows remote attackers to include and execute arbitrary files via the HTTP Host header.
|
17-08-2017 - 01:29 | 19-02-2009 - 15:30 |