Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The comment module in Drupal 5.x before 5.23 and 6.x before 6.18 allows remote authenticated users with certain privileges to bypass intended access restrictions and reinstate removed comments via a crafted URL, related to an "unpublishing bypass" issue.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Drupal comment模块多个远程权限许可和访问控制漏洞
Vulnerability Description
Drupal是很著名的开源内容管理平台，仿照了blog程序模式，但比普通的blog更灵活，可以做各种网站的内容管理平台。 Drupal 5.23之前的5.x版本和6.18之前的6.x版本中存中的comment模块中存在权限许可和访问控制漏洞。带有特定权限的远程认证用户可以借助特制的URL绕过访问限制并复原被移除的comment。
CVSS Information
N/A
Vulnerability Type
N/A