CVE-2006-5477: Drupal

Low severity, CVSS 2.6. EPSS: 1.4% chance of exploitation in the next 30 days.

Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allows form submissions to be redirected, which allows remote attackers to obtain arbitrary form information via a crafted URL.

Affected products

• Drupal Drupal: version 4.6.0 only; version 4.6.1 only; version 4.6.2 only; version 4.6.3 only; version 4.6.4 only; version 4.6.5 only; …

Published 2006-10-24. Last modified 2026-06-16.