Security advisories

Show advisories for only Drupal Core, only contributed projects, or only PSAs

CVS management/tracker XSS

By heine on 5 Dec 2006 at 20:48 UTC

Advisory ID: DRUPAL-SA-2006-028.
Project: CVS management/tracker (third party module).
Date: 2006-Dec-05.
Security risk: less critical.
Exploitable from: remote.
Vulnerability: Cross site scripting.

Extended Tracker - SQL Injection

By heine on 26 Oct 2006 at 07:30 UTC

Advisory ID: DRUPAL-SA-2006-027
Project: Extended Tracker (xtracker) 4.7
Date: 2006-Oct-26
Security risk: highly critical
Exploitable from: remote
Vulnerability: SQL injection

DRUPAL-SA-2006-026 - Drupal core - Form action attribute injection

By heine on 12 Oct 2006 at 11:55 UTC

Advisory ID: DRUPAL-SA-2006-026
Project: Drupal core
Date: 2006-Oct-18
Security risk: Less critical
Exploitable from: Remote
Vulnerability: HTML attribute injection

DRUPAL-SA-2006-025 - Drupal core - Cross site request forgeries

By heine on 12 Oct 2006 at 11:50 UTC

Advisory ID: DRUPAL-SA-2006-025
Project: Drupal core
Date: 2006-Oct-18
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Cross site request forgeries

DRUPAL-SA-2006-024 - Drupal core - Multiple cross site scripting vulnerabilities

By heine on 12 Oct 2006 at 11:47 UTC

Advisory ID: DRUPAL-SA-2006-024
Project: Drupal core
Date: 2006-Oct-18
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross site scripting

IMCE file handling vulnerabilities

By heine on 2 Oct 2006 at 20:25 UTC

Advisory ID: DRUPAL-SA-2006-023
Project: IMCE
Date: 2006-October-02
Security risk: highly critical
Exploitable from: remote
Vulnerability: file handling

Search Keywords cross site scripting vulnerability

By heine on 19 Sep 2006 at 22:48 UTC

Advisory ID: DRUPAL-SA-2006-022
Project: Search Keywords
Date: 2006-Sep-20
Security risk: moderately critical
Exploitable from: remote
Vulnerability: cross site scripting

Site Profile Directory cross site scripting vulnerability

By heine on 19 Sep 2006 at 22:46 UTC

Advisory ID: DRUPAL-SA-2006-021
Project: Site Profile Directory
Date: 2006-Sep-20
Security risk: less critical
Exploitable from: remote
Vulnerability: cross site scripting

Userreview cross site scripting vulnerability

By heine on 13 Sep 2006 at 16:12 UTC

Advisory ID: DRUPAL-SA-2006-020
Project: Userreview
Date: 2006-Sep-13
Security risk: less critical
Exploitable from: remote
Vulnerability: cross site scripting

Pubcookie security bypass

By heine on 8 Sep 2006 at 08:09 UTC

Advisory ID: DRUPAL-SA-2006-019
Project: Pubcookie 4.6, 4.7
Date: 2006-Sep-8
Security risk: highly critical
Exploitable from: remote
Vulnerability: security bypass

Pages

Subscribe with RSS