Deprecated - Security advisories for contributed projects

This forum is deprecated — view current Drupal contributed projects security advisories

SA-CONTRIB-2015-062 - Watchdog Aggregator - Cross Site Request Forgery (CSRF) - Unsupported

By Drupal Security Team on 25 Feb 2015 at 16:33 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-062
Project: Watchdog Aggregator (third-party module)
Version: 6.x, 7.x
Date: 2015-February-25
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery

SA-CONTRIB-2015-061 - Ubercart Webform Integration - Cross Site Scripting (XSS)

By Drupal Security Team on 25 Feb 2015 at 16:31 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-061
Project: Ubercart Webform Integration (third-party module)
Version: 6.x, 7.x
Date: 2015-February-25
Security risk: 14/25 ( Moderately Critical) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

SA-CONTRIB-2015-060 - Custom Sitemap - Cross Site Request Forgery (CSRF) - Unsupported

By Drupal Security Team on 25 Feb 2015 at 16:28 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-060
Project: Custom Sitemap (third-party module)
Version: 7.x
Date: 2015-February-25
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery

SA-CONTRIB-2015-059 - Spider Video Player - Multiple vulnerabilities - Unsupported

By Drupal Security Team on 25 Feb 2015 at 16:25 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-059
Project: Spider Video Player (third-party module)
Version: 6.x, 7.x
Date: 2015-February-25
Security risk: 15/25 ( Critical) AC:None/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Access bypass, Cross Site Request Forgery, Multiple vulnerabilities

SA-CONTRIB-2015-058 - Spider Catalog - Cross Site Request Forgery (CSRF) - Unsupported

By Drupal Security Team on 25 Feb 2015 at 16:22 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-058
Project: Spider Catalog (third-party module)
Version: 6.x, 7.x
Date: 2015-February-25
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery

SA-CONTRIB-2015-057 - Spider Contacts - Multiple vulnerabilities - Unsupported

By Drupal Security Team on 25 Feb 2015 at 16:17 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-057
Project: Spider Contacts (third-party module)
Version: 6.x, 7.x
Date: 2015-February-25
Security risk: 20/25 ( Highly Critical) AC:Basic/A:None/CI:All/II:All/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery, SQL Injection, Multiple vulnerabilities

Pages

Subscribe with RSS