Security advisories

Show advisories for only Drupal Core, only contributed projects, or only PSAs

Pubcookie security bypass

By heine on 8 Sep 2006 at 08:09 UTC

Advisory ID: DRUPAL-SA-2006-019
Project: Pubcookie 4.6, 4.7
Date: 2006-Sep-8
Security risk: highly critical
Exploitable from: remote
Vulnerability: security bypass

Pathauto cross site scripting vulnerability

By heine on 5 Sep 2006 at 14:40 UTC

Advisory ID: DRUPAL-SA-2006-018
Project: Pathauto 4.6, 4.7
Date: 2006-Sep-05
Security risk: less critical
Exploitable from: remote
Vulnerability: Cross site scripting

Easylinks multiple vulnerabilities

By heine on 22 Aug 2006 at 19:52 UTC

Advisory ID: DRUPAL-SA-2006-017
Project: Easylinks 4.7
Date: 2006-Aug-22
Security risk: highly critical
Exploitable from: remote
Vulnerability: SQL injection, Cross site scripting

E-commerce Cross site scripting vulnerability

By heine on 22 Aug 2006 at 19:49 UTC

Advisory ID: DRUPAL-SA-2006-016
Project: E-commerce 4.7
Date: 2006-Aug-22
Security risk: less critical
Exploitable from: remote
Vulnerability: Multiple Cross site scripting

DRUPAL-SA-2006-015: Multiple vulnerabilities in Bibliography

By heine on 9 Aug 2006 at 01:45 UTC

Advisory ID: DRUPAL-SA-2006-015
Project: Bibliography
Date: 2006-Aug-08
Security risk: highly critical
Exploitable from: remote
Vulnerability: SQL injection, Cross site scripting

Revision to DRUPAL-SA-2006-013 - Recipe

By heine on 9 Aug 2006 at 01:32 UTC

Advisory ID: DRUPAL-SA-2006-014
Project: Recipe 4.6
Date: 2006-Aug-08
Security risk: less critical
Exploitable from: remote
Vulnerability: Cross site scripting

DRUPAL-SA-2006-013: Recipe module

By gerhard killesreiter on 7 Aug 2006 at 21:12 UTC

Advisory ID: DRUPAL-SA-2006-013
Project: Recipe
Date: 2006-Aug-07
Security risk: less critical
Exploitable from: remote
Vulnerability: Cross site scripting

DRUPAL-SA-2006-012: Jobsearch module

By gerhard killesreiter on 7 Aug 2006 at 21:10 UTC

Advisory ID: DRUPAL-SA-2006-012
Project: Job Search
Date: 2006-Aug-07
Security risk: highly critical
Exploitable from: remote
Vulnerability: SQL injection

DRUPAL-SA-2006-011 XSS Vulnerability in user module

By gerhard killesreiter on 2 Aug 2006 at 17:03 UTC

Advisory ID: DRUPAL-SA-2006-011
Project: Drupal core
Date: 2006-Aug-2
Security risk: less critical
Impact: Drupal core
Exploitable from: remote
Vulnerability: cross-site scripting

XSS vulnerability in webform module

By chx on 9 Jul 2006 at 02:49 UTC

Advisory ID: DRUPAL-SA-2006-010
Project: webform
Date: 2006-Jul-09
Security risk: critical
Impact: webform
Exploitable from: remote
Vulnerability: multiple cross-site scripting

Pages

Subscribe with RSS