SA-CONTRIB-2011-004 - Multiple Vulnerabilities In Multiple Contributed Modules

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2011-004
  • Projects: Multiple third party modules - OG Forum, Open Legislation, PowerSQL
  • Version: 6.x
  • Date: 2011-February-02
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Multiple (Information disclosure, Cross Site Scripting, Cross Site Request Forgery, SQL injection)
⋅ Categories: Drupal 6.x

SA-CONTRIB-2011-003 - Janrain Engage (RPX) - Multiple Vulnerabilities

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2011-003
  • Project: Janrain Engage (formerly RPX) (third-party module)
  • Version: 6.x
  • Date: 2011-January-19
  • Security risk: Less critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Scripting or Arbitrary Code Execution
⋅ Categories: Drupal 6.x

SA-CONTRIB-2011-002 - Panels - Cross Site Scripting (XSS)

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2011-002
  • Project: Panels (third-party module)
  • Version: 6.x
  • Date: 2011-January-12
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Scripting
⋅ Categories: Drupal 6.x

SA-CONTRIB-2011-001 - Webform - SQL Injection

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2011-001
  • Project: Webform (third-party module)
  • Version: 6.x
  • Date: 2011-January-10
  • Security risk: Highly critical
  • Exploitable from: Remote
  • Vulnerability: SQL Injection
⋅ Categories: Drupal 6.x

SA-CONTRIB-2010-113 - Image - Cross Site Scripting

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2010-113
  • Project: Image (third-party module)
  • Version: 5.x, 6.x
  • Date: 2010-December-22
  • Security risk: Critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Scripting
⋅ Categories: Drupal 5.x, Drupal 6.x

SA-CONTRIB-2010-112 - oEmbed - Access Bypass

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2010-112
  • Project: oEmbed (third-party module)
  • Version: 6.x
  • Date: 2010-December-22
  • Security risk: Moderately Critical
  • Exploitable from: Remote
  • Vulnerability: Access Bypass
⋅ Categories: Drupal 6.x

Pages

Subscribe with RSS Subscribe to RSS - Deprecated - Security advisories for contributed projects