CVE-2007-0124

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-01-09 · updated 2026-06-16

Description

Unspecified vulnerability in Drupal before 4.6.11, and 4.7 before 4.7.5, when MySQL is used, allows remote authenticated users to cause a denial of service by poisoning the page cache via unspecified vectors, which triggers erroneous 404 HTTP errors for pages that exist.

Affected products

Drupal: 4.6, 4.6.0, 4.6.1, 4.6.2, 4.6.3, 4.6.4 (+12)

References

http://drupal.org/node/104238
http://osvdb.org/32131
http://secunia.com/advisories/23586
http://securityreason.com/securityalert/2115
http://www.securityfocus.com/archive/1/456056/100/0/threaded
http://www.securityfocus.com/bid/21895
http://www.vupen.com/english/advisories/2007/0051
http://drupal.org/node/104238
http://osvdb.org/32131
http://secunia.com/advisories/23586
http://securityreason.com/securityalert/2115
http://www.securityfocus.com/archive/1/456056/100/0/threaded

Get alerted when CVE-2007-0124 or the next vulnerability affects your stack