SA-CONTRIB-2009-004 - Notify - Privilege escalation

By heine on
  • Advisory ID: DRUPAL-SA-CONTRIB-2009-004
  • Project: Notify
  • Versions: 5.x
  • Date: 2009-January-15
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Privilege escalation

SA-CONTRIB-2009-003 - Internationalizaion (i18n) Translation module - Access bypass

By pwolanin on
  • Advisory ID: DRUPAL-SA-CONTRIB-2009-003
  • Project: Internationalization (i18n) (third-party module)
  • Version: 5.x-2.x
  • Date: 2009-January-14
  • Security risk: Less critical
  • Exploitable from: Remote
  • Vulnerability: Access bypass

SA-CONTRIB-2009-002 - Project issue tracking - Multiple vulnerabilities

By dww on
  • Advisory ID: DRUPAL-SA-CONTRIB-2009-002
  • Project: Project issue tracking (third-party module)
  • Version: 5.x-2.x
  • Date: 2009-January-07
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Node access bypass, Cross-site scripting (XSS)

SA-CONTRIB-2009-001 - Project release - Multiple vulnerabilities

By dww on
  • Advisory ID: DRUPAL-SA-CONTRIB-2009-001
  • Project: Project release (third-party module)
  • Version: 5.x
  • Date: 2009-January-07
  • Security risk: Highly critical
  • Exploitable from: Remote
  • Vulnerabilities: Arbitrary file upload, Cross-site scripting (XSS)

SA-2008-075 - Views - SQL Injection

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-2008-075
  • Project: Views
  • Versions: 6.x
  • Date: 2008-December-16
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: SQL injection

SA-2008-074 - Services - Insecure signing

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-2008-074
  • Project: Services (third-party module)
  • Versions: 5.x and 6.x
  • Date: 2008-December-17
  • Security risk: Critical
  • Exploitable from: Remote
  • Vulnerability: Repeat attacks and impersonation

Pages

Subscribe with RSS Subscribe to RSS - Deprecated - Security advisories for contributed projects