Deprecated - Security advisories for contributed projects

This forum is deprecated — view current Drupal contributed projects security advisories

SA-CONTRIB-2012-077 - Advertisement - Cross Site Scripting & Information Disclosure

By Drupal Security Team on 16 May 2012 at 15:16 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2012-077
Project: Advertisement (third-party module)
Version: 6.x
Date: 2012-May-16
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting, Information Disclosure, Multiple vulnerabilities

SA-CONTRIB-2012-076 - Ubercart Product Keys Access Bypass

By Drupal Security Team on 16 May 2012 at 15:07 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2012-076
Project: Ubercart Product Keys (third-party module)
Version: 6.x
Date: 2012-May-16
Security risk: Moderately Critical
Exploitable from: Remote
Vulnerability: Access bypass

SA-CONTRIB-2012-075 - Take Control - Cross Site Request Forgery (CSRF)

By Drupal Security Team on 9 May 2012 at 16:40 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2012-075
Project: Take Control (third-party module)
Version: 6.x
Date: 2012-May-09
Security risk: Critical
Exploitable from: Remote
Vulnerability: Cross Site Request Forgery

SA-CONTRIB-2012-074 - Contact Forms - Access Bypass

By Drupal Security Team on 9 May 2012 at 16:36 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2012-074
Project: Contact Forms (third-party module)
Version: 7.x
Date: 2012-May-09
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Access bypass

SA-CONTRIB-2012-073 - Glossary - Cross-Site Scripting (XSS)

By Drupal Security Team on 9 May 2012 at 16:24 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2012-073
Project: Glossary (third-party module)
Version: 6.x
Date: 2012-May-09
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

SA-CONTRIB-2012-072 - cctags - Cross Site Scripting (XSS)

By Drupal Security Team on 2 May 2012 at 19:36 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2012-072
Project: cctags (third-party module)
Version: 6.x, 7.x
Date: 2012-May-02
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

Pages

Subscribe with RSS