Deprecated - Security advisories for contributed projects | Drupal.org

This forum is deprecated — view current Drupal contributed projects security advisories

SA-CONTRIB-2009-076 - Flag Content Cross Site Scripting

By kbahey on 21 Oct 2009 at 18:28 UTC

Advisory ID: SA-CONTRIB-2009-076
Project: Flag Content (third-party module)
Version: 5.x
Date: 2009-October-21
Security risk: Moderately Critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

DRUPAL-SA-CONTRIB-2009-077 - Userpoints - Information disclosure

By Drupal Security Team on 21 Oct 2009 at 17:49 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2009-077
Project: Userpoints (third party module)
Version: 6.x
Date: 2009-October-21
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Information disclosure

SA-CONTRIB-2009-074- Webform - Multiple vulnerabilities

By cwgordon7 on 15 Oct 2009 at 02:22 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2009-074
Project: Webform (third-party module)
Version: 5.x, 6.x
Date: 2009-October-14
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Multiple vulnerabilities

DRUPAL-SA-CONTRIB-2009-073 - Printer, e-mail and PDF versions multiple vulnerabilities

By Drupal Security Team on 14 Oct 2009 at 23:05 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2009-073
Project: Printer, e-mail and PDF versions (third-party module)
Version: 5.x, 6.x
Date: 2009-October-14
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Multiple vulnerabilities

SA-CONTRIB-2009-072 - RealName - Cross Site Scripting

By drumm on 14 Oct 2009 at 22:11 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2009-072
Project: RealName (third-party module)
Version: 6.x
Date: 2009-October-14
Security risk: Moderately Critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

SA-CONTRIB-2009-071 - Organic Groups Vocabulary Access Bypass

By greggles on 14 Oct 2009 at 17:42 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2009-071
Project: OG Vocabulary (third party module)
Version: 6.x
Date: 2009-October-14
Security risk: Critical
Exploitable from: Remote
Vulnerability: Access bypass

Pages

Subscribe with RSS