SA-CONTRIB-2012-065 - Sitedoc - Information disclosure

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-065
  • Project: Site Documentation (third-party module)
  • Version: 6.x
  • Date: 2012-April-25
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Information Disclosure
⋅ Categories: Drupal 6.x

SA-CONTRIB-2012-064 - Ubercart - Multiple vulnerabilities

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-064
  • Project: Ubercart (third-party module)
  • Version: 6.x, 7.x
  • Date: 2012-April-25
  • Security risk: Moderately critical
  • Exploitable from: Varies (Local & Remote)
  • Vulnerability: Cross Site Scripting, Arbitrary PHP code execution, Multiple vulnerabilities
⋅ Categories: Drupal 6.x, Drupal 7.x

SA-CONTRIB-2012-063 - RealName - Cross Site Scripting (XSS)

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-063
  • Project: RealName (third-party module)
  • Version: 6.x
  • Date: 2012-April-25
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Scripting
⋅ Categories: Drupal 6.x

SA-CONTRIB-2012-062 - Creative Commons - Cross Site Scripting (XSS)

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-062
  • Project: Creative Commons (third-party module)
  • Version: 6.x
  • Date: 2012-April-25
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Scripting
⋅ Categories: Drupal 6.x

SA-CONTRIB-2012-061 - Gigya - Social optimization - Cross Site Scripting (XSS)

By Drupal Security Team on
⋅ Categories: Drupal 6.x

SA-CONTRIB-2012-060 - Commerce Reorder - Cross Site Request Forgery

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-060
  • Project: Commerce Reorder (third-party module)
  • Version: 7.x
  • Date: 2012-April-18
  • Security risk: Not critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Request Forgery
⋅ Categories: Drupal 7.x

Pages

Subscribe with RSS Subscribe to RSS - Deprecated - Security advisories for contributed projects