SA-CONTRIB-2009-028 - Feed Block - Cross Site Scripting

  • Advisory ID: DRUPAL-SA-CONTRIB-2009-028
  • Project: Feed Block (third-party module)
  • Version: 6.x
  • Date: 2009-May-13
  • Security risk: Less critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Scripting

SA-CONTRIB-2009-027 - Printer, e-mail and PDF versions - Cross-site scripting

  • Advisory ID: DRUPAL-SA-CONTRIB-2009-027
  • Project: Printer, e-mail and PDF versions (third-party module)
  • Versions: 5.x, 6.x
  • Date: 2009-May-13
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Multiple vulnerabilities

SA-CONTRIB-2009-026 - LoginToboggan - Access bypass

  • Advisory ID: DRUPAL-SA-CONTRIB-2009-026
  • Project: LoginToboggan (third-party module)
  • Version: 6.x
  • Date: 2009-May-13
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Access bypass

SA-CONTRIB-2009-025 - Fivestar - Cross-site request forgery

  • Advisory ID: DRUPAL-SA-CONTRIB-2009-025
  • Project: Fivestar (third-party module)
  • Version: 5.x, 6.x
  • Date: 2009-April-29
  • Security risk: Not critical
  • Exploitable from: Remote
  • Vulnerability: Cross-site request forgery

SA-CONTRIB-2009-023 - News Page - SQL injection

  • Advisory ID: DRUPAL-SA-CONTRIB-2009-023
  • Project: News Page
  • Versions: 5.x
  • Date: 2009-April-29
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: SQL injection

SA-CONTRIB-2009-022 - Exif - Cross Site Scripting

  • Advisory ID: DRUPAL-SA-CONTRIB-2009-022
  • Project: Exif (third-party module)
  • Version: 5.x, 6.x
  • Date: 2009-April-29
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Cross-site scripting

Description

The Exif module enables users to display EXIF tags in images on the site.

Pages

Subscribe with RSS Subscribe to RSS - Deprecated - Security advisories for contributed projects