{ "canonical_id": "drupal--CVE-2007-0124", "system_id": "drupal", "display_name": "Drupal", "category": "cms", "advisory_mode": "core", "title": "CVE-2007-0124", "summary": "Unspecified vulnerability in Drupal before 4.6.11, and 4.7 before 4.7.5, when MySQL is used, allows remote authenticated users to cause a denial of service by poisoning the page cache via unspecified vectors, which triggers erroneous 404 HTTP errors for pages that exist.", "published_at": "2007-01-09T02:28:00.000", "updated_at": "2025-04-09T00:30:58.490", "severity": "low", "cvss_score": 3.5, "exploit_status": "unknown", "source_confidence": "official", "official_source_url": "http://drupal.org/node/104238", "secondary_source_urls": [ "http://osvdb.org/32131", "http://secunia.com/advisories/23586", "http://securityreason.com/securityalert/2115", "http://www.securityfocus.com/archive/1/456056/100/0/threaded", "http://www.securityfocus.com/bid/21895", "http://www.vupen.com/english/advisories/2007/0051" ], "aliases": [ "CVE-2007-0124" ], "cve_ids": [ "CVE-2007-0124" ], "ghsa_ids": [], "osv_ids": [], "affected_versions": [], "fixed_versions": [], "package_name": null, "render_markdown": false, "case_path": null, "secure_code_topics": [ "authz-server-side-recheck", "xss-output-encoding", "file-upload-validation", "plugin-extension-trust-policy" ], "status": "triage", "triage_reasons": [ "missing affected/fixed version details" ], "verification_status": "triage-manual", "verification_mode": "synthetic", "last_verified_at": null, "last_run_id": null, "evidence_bundle": null, "historical_status": null, "latest_status": null, "browser_evidence": { "required": false, "present": false, "refs": [] }, "repro_profile_id": "xss-generic", "artifact_mode": "official-image", "blocked_reason": null, "metadata": { "source_names": [ "NVD Drupal" ], "source_kinds": [ "nvd-search" ], "candidate_count": 1 } }