Deprecated - Security advisories for contributed projects

This forum is deprecated — view current Drupal contributed projects security advisories

SA-CONTRIB-2010-081 - FileField Sources - Arbitrary Code Execution

By Drupal Security Team on 11 Aug 2010 at 18:31 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2010-081
Project: FileField Sources (third-party module)
Version: 6.x
Date: 2010-August-11
Security risk: Critical
Exploitable from: Remote
Vulnerability: Arbitrary Code Execution

SA-CONTRIB-2010-080 - Privatemsg - Cross Site Scripting

By Drupal Security Team on 11 Aug 2010 at 13:07 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2010-080
Project: Privatemsg (third-party module)
Version: 6.x
Date: 2010-August-11
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross-Site Scripting

SA-CONTRIB-2010-079 - Devel (Performance logging) - Cross Site Scripting

By kbahey on 4 Aug 2010 at 22:39 UTC

Advisory ID: SA-CONTRIB-2010-079
Project: Devel (third-party module)
Version: 5.x, 6.x
Date: 2010-Aug-04
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

SA-CONTRIB-2010-078 - Kaltura - Information disclosure

By Drupal Security Team on 28 Jul 2010 at 22:38 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2010-078
Project: Kaltura (third-party module)
Versions: 5.x, 6.x
Date: 2010-July-28
Security risk: Less Critical
Exploitable from: Remote
Vulnerability: Information disclosure

SA-CONTRIB-2010-077 - Sage Pay (former Protx) Direct Payment Gateway for Ubercart - Information Disclosure

By Drupal Security Team on 28 Jul 2010 at 17:25 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2010-077
Project: Sage Pay Direct Payment Gateway for Ubercart (third-party module)
Version: 5.x, 6.x
Date: 2010-July-28
Security risk: Less Critical
Exploitable from: Remote
Vulnerability: Information Disclosure

SA-CONTRIB-2010-076 - Dashboard - Cross Site Scripting (CSS)

By Drupal Security Team on 28 Jul 2010 at 16:11 UTC

Advisory ID: SA-CONTRIB-2010-076
Project: Dashboard (third-party module)
Version: 6.x
Date: 2010-July-28
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

Pages

Subscribe with RSS