Security advisories

Show advisories for only Drupal Core, only contributed projects, or only PSAs

DRUPAL-SA-2006-026 - Drupal core - Form action attribute injection

By heine on 12 Oct 2006 at 11:55 UTC

Advisory ID: DRUPAL-SA-2006-026
Project: Drupal core
Date: 2006-Oct-18
Security risk: Less critical
Exploitable from: Remote
Vulnerability: HTML attribute injection

DRUPAL-SA-2006-025 - Drupal core - Cross site request forgeries

By heine on 12 Oct 2006 at 11:50 UTC

Advisory ID: DRUPAL-SA-2006-025
Project: Drupal core
Date: 2006-Oct-18
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Cross site request forgeries

DRUPAL-SA-2006-024 - Drupal core - Multiple cross site scripting vulnerabilities

By heine on 12 Oct 2006 at 11:47 UTC

Advisory ID: DRUPAL-SA-2006-024
Project: Drupal core
Date: 2006-Oct-18
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross site scripting

IMCE file handling vulnerabilities

By heine on 2 Oct 2006 at 20:25 UTC

Advisory ID: DRUPAL-SA-2006-023
Project: IMCE
Date: 2006-October-02
Security risk: highly critical
Exploitable from: remote
Vulnerability: file handling

Search Keywords cross site scripting vulnerability

By heine on 19 Sep 2006 at 22:48 UTC

Advisory ID: DRUPAL-SA-2006-022
Project: Search Keywords
Date: 2006-Sep-20
Security risk: moderately critical
Exploitable from: remote
Vulnerability: cross site scripting

Site Profile Directory cross site scripting vulnerability

By heine on 19 Sep 2006 at 22:46 UTC

Advisory ID: DRUPAL-SA-2006-021
Project: Site Profile Directory
Date: 2006-Sep-20
Security risk: less critical
Exploitable from: remote
Vulnerability: cross site scripting

Userreview cross site scripting vulnerability

By heine on 13 Sep 2006 at 16:12 UTC

Advisory ID: DRUPAL-SA-2006-020
Project: Userreview
Date: 2006-Sep-13
Security risk: less critical
Exploitable from: remote
Vulnerability: cross site scripting

Pubcookie security bypass

By heine on 8 Sep 2006 at 08:09 UTC

Advisory ID: DRUPAL-SA-2006-019
Project: Pubcookie 4.6, 4.7
Date: 2006-Sep-8
Security risk: highly critical
Exploitable from: remote
Vulnerability: security bypass

Pathauto cross site scripting vulnerability

By heine on 5 Sep 2006 at 14:40 UTC

Advisory ID: DRUPAL-SA-2006-018
Project: Pathauto 4.6, 4.7
Date: 2006-Sep-05
Security risk: less critical
Exploitable from: remote
Vulnerability: Cross site scripting

Easylinks multiple vulnerabilities

By heine on 22 Aug 2006 at 19:52 UTC

Advisory ID: DRUPAL-SA-2006-017
Project: Easylinks 4.7
Date: 2006-Aug-22
Security risk: highly critical
Exploitable from: remote
Vulnerability: SQL injection, Cross site scripting

Pages

Subscribe with RSS