CVE-2007-0124: Drupal

Low severity, CVSS 3.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Unspecified vulnerability in Drupal before 4.6.11, and 4.7 before 4.7.5, when MySQL is used, allows remote authenticated users to cause a denial of service by poisoning the page cache via unspecified vectors, which triggers erroneous 404 HTTP errors for pages that exist.

Affected products

• Drupal Drupal: version 4.6 only; version 4.6.0 only; version 4.6.1 only; version 4.6.2 only; version 4.6.3 only; version 4.6.4 only; …

Published 2007-01-09. Last modified 2026-06-16.