Deprecated - Security advisories for Drupal core

This forum is deprecated — view current Drupal core security advisories

Drupal core - Cross site request forgeries

By heine on 26 Jul 2007 at 18:58 UTC

Advisory ID: DRUPAL-SA-2007-017
Project: Drupal core
Version: 5.x
Date: 2007-July-26
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Multiple cross site request forgeries

DRUPAL-SA-2007-005 - Drupal core - Arbitrary code execution

By heine on 29 Jan 2007 at 19:11 UTC

Advisory ID: DRUPAL-SA-2007-005
Project: Drupal core
Version: 4.7.x, 5.x
Date: 2007-Jan-29
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Arbitrary code execution

Drupal core - Denial of service

By heine on 19 Dec 2006 at 15:53 UTC

Advisory ID: DRUPAL-SA-2007-002.
Project: Drupal Core.
Version: 4.6, 4.7
Date: 2007-Jan-05.
Security risk: Less critical.
Exploitable from: Remote.
Vulnerability: Denial of service.

Drupal core - Cross site scripting

By heine on 19 Dec 2006 at 15:43 UTC

Advisory ID: DRUPAL-SA-2007-001.
Project: Drupal Core.
Version: 4.6, 4.7.
Date: 2007-Jan-05.
Security risk: Less critical.
Exploitable from: Remote.
Vulnerability: Cross site scripting.

DRUPAL-SA-2006-026 - Drupal core - Form action attribute injection

By heine on 12 Oct 2006 at 11:55 UTC

Advisory ID: DRUPAL-SA-2006-026
Project: Drupal core
Date: 2006-Oct-18
Security risk: Less critical
Exploitable from: Remote
Vulnerability: HTML attribute injection

DRUPAL-SA-2006-025 - Drupal core - Cross site request forgeries

By heine on 12 Oct 2006 at 11:50 UTC

Advisory ID: DRUPAL-SA-2006-025
Project: Drupal core
Date: 2006-Oct-18
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Cross site request forgeries

Pages

Subscribe with RSS