Security advisories

Show advisories for only Drupal Core, only contributed projects, or only PSAs

SA-2008-023 - Ubercart - Cross site scripting

By heine on 2 Apr 2008 at 20:13 UTC

Advisory ID: DRUPAL-SA-2008-023
Project: Ubercart (third-party module)
Version: 5.x
Date: 2008-April-02
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross site scripting

SA-2008-022 - Flickr - Cross site scripting

By heine on 2 Apr 2008 at 20:06 UTC

Advisory ID: DRUPAL-SA-2008-022
Project: Flickr (third-party module)
Version: 5.x, 6.x
Date: 2008-April-02
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross site scripting

SA-2008-021 - Live - Cross site request forgery

By heine on 20 Mar 2008 at 05:39 UTC

Advisory ID: DRUPAL-SA-2008-021
Project: Live (third-party module)
Version: 5.x
Date: 2008-March-23
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross site request forgery

SA-2008-020 - Ubercart - Cross site scripting

By heine on 12 Mar 2008 at 21:06 UTC

Advisory ID: DRUPAL-SA-2008-020
Project: Ubercart (third-party module)
Version: 5.x
Date: 2008-March-12
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross site scripting

SA-2008-019 - Refine by Taxonomy - Cross site scripting

By heine on 5 Mar 2008 at 21:00 UTC

Advisory ID: DRUPAL-SA-2008-019
Project: Refine by Taxonomy (third-party module)
Version: 5.x
Date: 2008-March-05
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross site scripting

SA-2008-018 - Drupal core - Cross site scripting

By gábor hojtsy on 27 Feb 2008 at 19:23 UTC

Advisory ID: DRUPAL-SA-2008-018
Project: Drupal core
Version: 6.0
Date: 2008-February-27
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Multiple cross site scripting vulnerabilities

SA-2008-017 - Header image - Access bypass

By heine on 13 Feb 2008 at 19:22 UTC

Advisory ID: DRUPAL-SA-2008-017
Project: Header image (third-party module)
Version: 5.x-1.0
Date: 2008-February-13
Security risk: Not critical
Exploitable from: Remote
Vulnerability: Access bypass

SA-2008-016 - OpenID - Incorrect claimed_id returned for OpenID 2.0

By walkah on 30 Jan 2008 at 22:40 UTC

Advisory ID: DRUPAL-SA-2008-016
Project: OpenID (third-party module)
Version: 5.x-1.0
Date: 2008-January-30
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Identity impersonation

SA-2008-015 - Comment Upload - Arbitrary file upload

By heine on 30 Jan 2008 at 20:41 UTC

Advisory ID: DRUPAL-SA-2008-015
Project: Comment upload (third-party module)
Version: 4.7.x, 5.x
Date: 2008-January-30
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Arbitrary file upload

SA-2008-014 - Userpoints - Cross site request forgery

By heine on 30 Jan 2008 at 20:41 UTC

Advisory ID: DRUPAL-SA-2008-014
Project: Userpoints (third-party module)
Version: 4.7.x, 5.x-2.x, 5.x-3.x
Date: 2008-January-30
Security risk: Not critical
Exploitable from: Remote
Vulnerability: Cross site request forgery

Pages

Subscribe with RSS