CVE-2006-4717: Drupal Pubcookie Module

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

The login redirection mechanism in the Drupal 4.7 Pubcookie module before 1.2.2.4 2006/09/06 and the Drupal 4.6 Pubcookie module before 1.6.2.1 2006/09/07 allows remote attackers to bypass authentication requirements and spoof identities of arbitrary users via unspecified vectors.

Affected products

• Drupal Drupal Pubcookie Module: version 1.2.2.4 only; version 1.6.2.1 only

Published 2006-09-12. Last modified 2026-06-16.