SA-CONTRIB-2012-161 - Webform CiviCRM Integration - Access Bypass

By Drupal Security Team on
⋅ Categories: Drupal 7.x

SA-CONTRIB-2012-160 - OM Maximenu - Cross Site Scripting (XSS)

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-160
  • Project: OM Maximenu (third-party module)
  • Version: 6.x, 7.x
  • Date: 2012-November-07
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Scripting
⋅ Categories: Drupal 6.x, Drupal 7.x

SA-CONTRIB-2012-159 - Password policy - Information leakage of hashed passwords

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-159
  • Project: Password policy (third-party module)
  • Version: 6.x, 7.x
  • Date: 2012-October-31
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Information Disclosure
⋅ Categories: Drupal 6.x, Drupal 7.x

SA-CONTRIB-2012-158 - MailChimp - Cross Site Scripting (XSS)

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-158
  • Project: MailChimp (third-party module)
  • Version: 7.x
  • Date: 2012-October-24
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Scripting
⋅ Categories: Drupal 7.x

SA-CONTRIB-2012-157 - Time Spent - Multiple Vulnerabilities - (unsupported)

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-157
  • Project: Time Spent (third-party module)
  • Version: 6.x, 7.x
  • Date: 2012-October-24
  • Security risk: Critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Scripting, Cross Site Request Forgery, SQL Injection, Multiple vulnerabilities
⋅ Categories: Drupal 6.x, Drupal 7.x

SA-CONTRIB-2012-156 - Search API - Cross Site Request Forgery (CSRF)

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-156
  • Project: Search API (third-party module)
  • Version: 7.x
  • Date: 2012-October-17
  • Security risk: Less critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Request Forgery
⋅ Categories: Drupal 7.x

Pages

Subscribe with RSS Subscribe to RSS - Deprecated - Security advisories for contributed projects