SA-CONTRIB-2012-041 - Fancy Slide - Cross Site Scripting (XSS)

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-041
  • Project: Fancy Slide (third-party module)
  • Version: 6.x
  • Date: 2012-March-14
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Scripting
⋅ Categories: Drupal 6.x

SA-CONTRIB-2012-040 - CKEditor and FCKeditor - multiple XSS, arbitrary code execution

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-040
  • Project: CKEditor, FCKeditor - WYSIWYG HTML editor (third-party module)
  • Version: 6.x, 7.x
  • Date: 2012-March-14
  • Security risk: Highly critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Scripting, Cross Site Request Forgery, Arbitrary PHP code execution
⋅ Categories: Drupal 6.x, Drupal 7.x

SA-CONTRIB-2012-039 - Language Icons - Cross Site Scripting (XSS)

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-039
  • Project: Language icons (third-party module)
  • Version: 6.x, 7.x
  • Date: 2012-March-14
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Scripting
⋅ Categories: Drupal 6.x, Drupal 7.x

SA-CONTRIB-2012-038 - Views Language Switcher Cross Site Scripting (XSS)

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-038
  • Project: Views Language Switcher (third-party module)
  • Version: 7.x
  • Date: 2012-March-14
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Scripting
⋅ Categories: Drupal 7.x

SA-CONTRIB-2012-037 - Slidebox - access bypass

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-037
  • Project: Slidebox (third-party module)
  • Version: 7.x
  • Date: 2012-March-14
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Access bypass
⋅ Categories: Drupal 7.x

SA-CONTRIB-2012-036 - Multiple Modules Unsupported

By Drupal Security Team on
⋅ Categories: Drupal 6.x, Drupal 7.x

Pages

Subscribe with RSS Subscribe to RSS - Deprecated - Security advisories for contributed projects