Test ID:	1.3.6.1.4.1.25623.1.0.810226
Category:	Web application abuses
Title:	Drupal Multiple Vulnerabilities (Dec 2016) - Windows
Summary:	Drupal is prone to multiple vulnerabilities.
Description:	Summary: Drupal is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - An inconsistent naming of access query tags for taxonomy terms. - The user password reset form does not specify a proper cache context. - The confirmation forms allow external URLs to be injected. - An error in transliterate mechanism. Vulnerability Impact: Successful exploitation will allow remote attackers to cause a denial of service condition, obtain sensitive information, conduct cache poisoning attacks and conduct open redirect attacks. Affected Software/OS: Drupal core 7.x versions prior to 7.52 and 8.x versions prior to 8.2.3 on Windows Solution: Upgrade to version 7.52 or 8.2.3 or newer. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9449 BugTraq ID: 94367 http://www.securityfocus.com/bid/94367 Debian Security Information: DSA-3718 (Google Search) http://www.debian.org/security/2016/dsa-3718 Common Vulnerability Exposure (CVE) ID: CVE-2016-9450 Common Vulnerability Exposure (CVE) ID: CVE-2016-9451 Common Vulnerability Exposure (CVE) ID: CVE-2016-9452
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.