SA-CONTRIB-2015-029 - Corner - Cross Site Request Forgery (CSRF) - Unsupported

SA-CONTRIB-2015-028 - Shibboleth Authentication - Cross Site Request Forgery (CSRF)

SA-CONTRIB-2015-027 - Quizzler - Cross Site Scripting (XSS)

SA-CONTRIB-2015-026 - Taxonews - Cross Site Scripting (XSS)

SA-CONTRIB-2015-025 - Patterns - Cross Site Request Forgery (CSRF)

SA-CONTRIB-2015-023 - Classified Ads - Cross Site Scripting (XSS)

SA-CONTRIB-2015-024 - Alfresco - Cross Site Request Forgery (CSRF)

SA-CONTRIB-2015-022 - nodeauthor - Cross Site Scripting (XSS) - Unsupported

SA-CONTRIB-2015-021 - Content Analysis - Cross Site Scripting (XSS)

SA-CONTRIB-2015-020 - Contact Form Fields - Cross Site Request Forgery (CSRF)

SA-CONTRIB-2015-019 - Ubercart Currency Conversion - Open Redirect

SA-CONTRIB-2015-018 - Video - Cross Site Scripting (XSS)

SA-CONTRIB-2015-017 - Room Reservations - Cross Site Scripting (XSS)

SA-CONTRIB-2015-016 - Tadaa! - Multiple vulnerabilities

SA-CONTRIB-2015-015 - Term Merge - Cross Site Scripting (XSS)

SA-CONTRIB-2015-014 - Wishlist - Multiple vulnerabilities

SA-CONTRIB-2015-010 - Log Watcher - Cross Site Request Forgery (CSRF)

SA-CONTRIB-2015-013 - Field Display Label - Cross Site Scripting (XSS)

SA-CONTRIB-2015-012 - Jammer - Cross Site Request Forgery (CSRF)

SA-CONTRIB-2015-011 - Todo Filter - Cross Site Request Forgery (CSRF)

SA-CONTRIB-2015-009 - Linkit - Cross Site Scripting (XSS)

SA-CONTRIB-2015-008 - Batch Jobs - Cross Site Request Forgery (CSRF)

SA-CONTRIB-2015-006 - Cloudwords for Multilingual Drupal - Multiple vulnerabilities

SA-CONTRIB-2015-007 - Htaccess - Cross Site Request Forgery (CSRF)

SA-CONTRIB-2015-005 - WikiWiki - SQL injection

SA-CONTRIB-2015-004 - Context - Open Redirect

SA-CONTRIB-2015-003 - PHPlist Integration Module - SQL Injection

SA-CONTRIB-2015-002 - Course - Cross Site Scripting (XSS)

SA-CONTRIB-2015-001 - OPAC - Cross Site Request Forgery (CSRF)

SA-CONTRIB-2014-128 - Organic Groups Menu - Access bypass

SA-CONTRIB-2014-127 - School Administration - Cross Site Scripting (XSS)

SA-CONTRIB-2014-126 - Open Atrium - Multiple vulnerabilities

SA-CONTRIB-2014-125 - Organic Groups Menu - Access bypass

SA-CONTRIB-2014-124 - Poll Chart - Cross Site Scripting (XSS)

SA-CONTRIB-2014-123 - Postal Code - Cross Site Scripting (XSS)

SA-CONTRIB-2014-122 - MoIP - Cross Site Scripting (XSS)

SA-CONTRIB-2014-121 - Godwin's Law - Cross Site Scripting (XSS)

SA-CONTRIB-2014-120 - Piwik Web Analytics - Information disclosure

SA-CONTRIB-2014-119 - Google Analytics - Information disclosure

SA-CONTRIB-2014-118 - Administer Users by Role - Access Bypass - Unsupported

SA-CONTRIB-2014-117 - Hierarchical Select - Cross Site Scripting (XSS)

SA-CONTRIB-2014-116 - Webform Invitation - Cross Site Scripting (XSS)

SA-CONTRIB-2014-115 - Form Builder - Cross-Site Scripting (XSS)

SA-CONTRIB-2014-114 - Tournament - Cross Site Scripting

SA-CONTRIB-2014-113 - Secure Password Hashes - Denial of Service

SA-CONTRIB-2014-112 - Node Field - Cross Site Scripting (XSS)

SA-CONTRIB-2014-111 - Protected Pages - Password Protection Bypass

SA-CONTRIB-2014-109 - Freelinking - Cross Site Scripting (XSS)

SA-CONTRIB-2014-108 - Webform Component Roles - Access Bypass

Pages

Subscribe with RSS Subscribe to Security advisories