Skip to main content
Skip to search
Can we use first and third party cookies and web beacons to
understand our audience, and to tailor promotions you see
?
Yes, please
No, do not track me
Drupal.org home
Discover Drupal
Drupal Core
Drupal CMS
Drupal AI
Case Studies
Drupal for Government
Drupal for Higher Education
Drupal for Nonprofit
Drupal for eCommerce
Drupal for FinTech
Drupal for Healthcare
Drupal for Media & Publishing
Build with Drupal
Download Drupal
Documentation
Getting started
Local Development Guide
Developer Resources
Drupal CMS User Guide
Drupal User Guide
API
Modules
Themes
Distributions
Issue queues
Security Advisories
Partners & Services
Find a Drupal Certified Partner
Become a Drupal Certified Partner
Find a Hosting Provider
Find a Migration Partner
Find Training
Drupal Steward
Community
About the Community
How to Contribute
DrupalCon
Events
Jobs / Careers
News & Blogs
Forum
Slack
Newsletters
Drupal Swag Shop
Support Drupal
The Drupal Association
Donate
Become a Partner
Become a Ripple Maker
Become an Organization Member
Drupal Swag Shop
Get Started
Try Drupal CMS
Try Hosting
Return to content
Search form
Search
Log in
Create account
Not attending DrupalCon Vienna 2025? We would love to hear why. Your feedback helps us understand the community better.
Please complete the short survey here
Home
Deprecated
Deprecated - Newsletters
Deprecated - Security advisories for contributed projects
This forum is deprecated —
view current Drupal contributed projects security advisories
SA-CONTRIB-2009-094 - NGP COO/CWP Integration (crmngp) - Multiple Vulnerabilities
By
coltrane
on
4 Nov 2009 at 19:58 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2009-094
Project: NGP COO/CWP Integration (crmngp) (third-party module)
Version: 6.x
Date: 2009-November-4
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross-site scripting and Access bypass
SA-CONTRIB-2009-093 - Temporary Invitation - Cross Site Scripting
By
meba
on
4 Nov 2009 at 19:40 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2009-093
Project: Temporary Invitation (third-party module)
Version: 5.x
Date: 2009 November 4
Security risk: Less Critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting
SA-CONTRIB-2009-092 - S5 Presentation Player Cross Site Scripting
By
Drupal Security Team
on
4 Nov 2009 at 19:24 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2009-092
Project: S5 Presentation Player (third-party module)
Version: 6.x
Date: 2009 November 4
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting
SA-CONTRIB-2009-091 - Node Hierarchy - Cross Site Scripting
By
Drupal Security Team
on
4 Nov 2009 at 19:02 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2009-091
Project: Node Hierarchy (third-party module)
Version: 6.x, 5.x
Date: 2009 November 4
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting
SA-CONTRIB-2009-090 - User Protect - Cross Site Request Forgery
By
hunmonk
on
4 Nov 2009 at 13:20 UTC
Advisory ID: SA-CONTRIB-2009-090
Project: User Protect (third-party module)
Version: 5.x, 6.x
Date: 2009-November-04
Security risk: Moderate
Exploitable from: Remote
Vulnerability: Cross site request forgery
SA-CONTRIB-2009-089 - Storm - Access Bypass
By
greggles
on
28 Oct 2009 at 22:43 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2009-089
Project: Storm (third-party module)
Version: 6.x
Date: 2009-October-28
Security risk: Less Critical
Exploitable from: Remote
Vulnerability: Access Bypass
Pages
« first
‹ previous
…
148
149
150
151
152
153
154
155
156
…
next ›
last »
Subscribe with RSS