Security advisories

Show advisories for only Drupal Core, only contributed projects, or only PSAs

Captcha - response validation bypass

By heine on 30 Jan 2007 at 21:43 UTC

Advisory ID: DRUPAL-SA-2007-006
Project: Captcha (third-party module)
Version: 4.7.x, 5.x
Date: 2007-Jan-30
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Captcha bypass

DRUPAL-SA-2007-005 - Drupal core - Arbitrary code execution

By heine on 29 Jan 2007 at 19:11 UTC

Advisory ID: DRUPAL-SA-2007-005
Project: Drupal core
Version: 4.7.x, 5.x
Date: 2007-Jan-29
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Arbitrary code execution

Project and Project issue tracking - Multiple vulnerabilities

By dww on 23 Jan 2007 at 21:04 UTC

Advisory ID: DRUPAL-SA-2007-004.
Project: Project and Project issue tracking (third party modules).
Date: 2007-Jan-23.
Security risk: Moderately critical.
Exploitable from: Remote.
Vulnerability: Access bypass, Cross site scripting, and unsafe file upload handling.

Acidfree - SQL injection

By heine on 23 Jan 2007 at 21:03 UTC

Advisory ID: DRUPAL-SA-2007-003.
Project: Acidfree (third-party module).
Version: 4.6.x, 4.7.x
Date: 2007-Jan-23.
Security risk: Highly critical.
Exploitable from: Remote.
Vulnerability: SQL Injection.

Drupal core - Denial of service

By heine on 19 Dec 2006 at 15:53 UTC

Advisory ID: DRUPAL-SA-2007-002.
Project: Drupal Core.
Version: 4.6, 4.7
Date: 2007-Jan-05.
Security risk: Less critical.
Exploitable from: Remote.
Vulnerability: Denial of service.

Drupal core - Cross site scripting

By heine on 19 Dec 2006 at 15:43 UTC

Advisory ID: DRUPAL-SA-2007-001.
Project: Drupal Core.
Version: 4.6, 4.7.
Date: 2007-Jan-05.
Security risk: Less critical.
Exploitable from: Remote.
Vulnerability: Cross site scripting.

MySite - Cross site scripting

By heine on 18 Dec 2006 at 09:21 UTC

Advisory ID: DRUPAL-SA-2006-032.
Project: MySite (third-party module).
Version: 4.7.0, 4.7.x-3.2, 5.x-1.2.
Date: 2006-12-18.
Security risk: Less critical.
Exploitable from: Remote.
Vulnerability: Cross site scripting.

Project and Project issue tracking XSS

By dww on 18 Dec 2006 at 07:52 UTC

Advisory ID: DRUPAL-SA-2006-031.
Project: Project and Project issue tracking (third party modules).
Date: 2006-Dec-18.
Security risk: Less critical.
Exploitable from: Remote.
Vulnerability: Cross site scripting.

Chatroom - Security bypass

By heine on 11 Dec 2006 at 09:44 UTC

Advisory ID: DRUPAL-SA-2006-030.
Project: Chatroom (third-party module).
Date: 2006-Dec-11.
Security risk: Highly critical.
Exploitable from: Remote.
Vulnerability: Security bypass.

Help Tip - Multiple vulnerabilities

By heine on 11 Dec 2006 at 09:27 UTC

Advisory ID: DRUPAL-SA-2006-029.
Project: Help Tip (third-party module).
Date: 2006-Dec-11.
Security risk: highly critical.
Exploitable from: remote.
Vulnerability: SQL Injection, Cross site scripting.

Pages

Subscribe with RSS