Security advisories | Drupal.org

Show advisories for only Drupal Core, only contributed projects, or only PSAs

SA-2008-019 - Refine by Taxonomy - Cross site scripting

By Heine on 5 Mar 2008 at 21:00 UTC

Advisory ID: DRUPAL-SA-2008-019
Project: Refine by Taxonomy (third-party module)
Version: 5.x
Date: 2008-March-05
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross site scripting

SA-2008-018 - Drupal core - Cross site scripting

By Gábor Hojtsy on 27 Feb 2008 at 19:23 UTC

Advisory ID: DRUPAL-SA-2008-018
Project: Drupal core
Version: 6.0
Date: 2008-February-27
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Multiple cross site scripting vulnerabilities

SA-2008-017 - Header image - Access bypass

By Heine on 13 Feb 2008 at 19:22 UTC

Advisory ID: DRUPAL-SA-2008-017
Project: Header image (third-party module)
Version: 5.x-1.0
Date: 2008-February-13
Security risk: Not critical
Exploitable from: Remote
Vulnerability: Access bypass

SA-2008-016 - OpenID - Incorrect claimed_id returned for OpenID 2.0

By walkah on 30 Jan 2008 at 22:40 UTC

Advisory ID: DRUPAL-SA-2008-016
Project: OpenID (third-party module)
Version: 5.x-1.0
Date: 2008-January-30
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Identity impersonation

SA-2008-015 - Comment Upload - Arbitrary file upload

By Heine on 30 Jan 2008 at 20:41 UTC

Advisory ID: DRUPAL-SA-2008-015
Project: Comment upload (third-party module)
Version: 4.7.x, 5.x
Date: 2008-January-30
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Arbitrary file upload

SA-2008-014 - Userpoints - Cross site request forgery

By Heine on 30 Jan 2008 at 20:41 UTC

Advisory ID: DRUPAL-SA-2008-014
Project: Userpoints (third-party module)
Version: 4.7.x, 5.x-2.x, 5.x-3.x
Date: 2008-January-30
Security risk: Not critical
Exploitable from: Remote
Vulnerability: Cross site request forgery

SA-2008-013 - Project issue tracking - Arbitrary file upload

By dww on 30 Jan 2008 at 20:41 UTC

Advisory ID: DRUPAL-SA-2008-013
Project: Project issue tracking (third-party module)
Version: 4.7.x-1.x, 4.7.x-2.x, 5.x-1.x, 5.x-2.x
Date: 2008-January-30
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Arbitrary file upload

SA-2008-012 - Project issue tracking - XSS vulnerability in comment summary tables

By Heine on 30 Jan 2008 at 20:41 UTC

Advisory ID: DRUPAL-SA-2008-012
Project: Project issue tracking (third-party module)
Version: 4.7.x-1.x, 4.7.x-2.x, 5.x-1.x, 5.x-2.x
Date: 2008-January-30
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross-site scripting (XSS)

SA-2008-011 - Securesite - Access bypass

By Heine on 30 Jan 2008 at 20:39 UTC

Advisory ID: DRUPAL-SA-2008-011
Project: Secure Site (third-party module)
Version: 5.x-1.0, 4.7.x-1.0
Date: 2008-January-30
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Access bypass

SA-2008-10 - Archive - Cross site scripting

By Heine on 23 Jan 2008 at 21:37 UTC

Advisory ID: DRUPAL-SA-2008-010
Project: Archive (third-party module)
Version: 5.x
Date: 2008-January-23
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross site scripting

Pages

Subscribe with RSS