Deprecated - Security advisories for contributed projects

This forum is deprecated — view current Drupal contributed projects security advisories

SA-CONTRIB-2011-052 - Views SQL Injection

By Drupal Security Team on 2 Nov 2011 at 22:00 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2011-052
Project: Views (third-party module)
Version: 6.x
Date: 2011-November-02
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: SQL Injection

SA-CONTRIB-2011-051 - Hotblocks module - multiple vulnerabilities

By Drupal Security Team on 2 Nov 2011 at 19:52 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2011-051
Project: HotBlocks (third-party module)
Version: 6.x
Date: 2011-November-02
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Access bypass, Cross Site Scripting, Cross Site Request Forgery

SA-CONTRIB-2011-050 - Organic groups - Access bypass

By Drupal Security Team on 26 Oct 2011 at 15:27 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2011-050
Project: Organic groups (third-party module)
Version: 7.x
Date: 2011-October-26
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Access bypass

SA-CONTRIB-2011-049 - Cumulus - Cross Site Scripting (XSS)

By Drupal Security Team on 12 Oct 2011 at 16:08 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2011-049
Project: Cumulus (third-party module)
Version: 5.x, 6.x
Date: 2011-October-12
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting (XSS)

SA-CONTRIB-2011-048 - Certificate Login SQL Injection

By Drupal Security Team on 12 Oct 2011 at 16:04 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2011-048
Project: Certificate Login (third-party module)
Version: 5.x, 6.x
Date: 2011-October-12
Security risk: Critical
Exploitable from: Remote
Vulnerability: SQL Injection

SA-CONTRIB-2011-047 - OG Features access bypass

By Drupal Security Team on 5 Oct 2011 at 19:12 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2011-047
Project: OG Features (third-party module)
Version: 6.x
Date: 2011-October-05
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Access bypass

Pages

Subscribe with RSS