SA-CONTRIB-2012-155 - ShareThis - Cross Site Scripting (XSS)

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-155
  • Project: ShareThis (third-party module)
  • Version: 7.x
  • Date: 2012-October-10
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Scripting
⋅ Categories: Drupal 7.x

SA-CONTRIB-2012-154 - Basic webmail - Multiple vulnerabilities

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-154
  • Project: Basic webmail (third-party module)
  • Version: 6.x
  • Date: 2012-October-10
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Scripting, Information Disclosure, Multiple vulnerabilities
⋅ Categories: Drupal 6.x

SA-CONTRIB-2012-153 - Mandrill - Information Disclosure

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-153
  • Project: Mandrill (third-party module)
  • Version: 7.x
  • Date: 2012-October-10
  • Security risk: Moderately critical
  • Exploitable from: Remote
  • Vulnerability: Information Disclosure
⋅ Categories: Drupal 7.x

SA-CONTRIB-2012-152 - Feeds - Access bypass

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-152
  • Project: Feeds (third-party module)
  • Version: 7.x
  • Date: 2012-October-10
  • Security risk: Not critical
  • Exploitable from: Remote
  • Vulnerability: Access bypass
⋅ Categories: Drupal 7.x

SA-CONTRIB-2012-151 - Commerce Extra Panes - Cross Site Request Forgery

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-151
  • Project: Commerce extra panes (third-party module)
  • Version: 7.x
  • Date: 2012-October-3
  • Security risk: Less critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Request Forgery

SA-CONTRIB-2012-150 - Twitter Pull - Cross Site Scripting (XSS)

By Drupal Security Team on
  • Advisory ID: DRUPAL-SA-CONTRIB-2012-150
  • Project: Twitter Pull (third-party module)
  • Version: 6.x, 7.x
  • Date: 2012-October-03
  • Security risk: Less critical
  • Exploitable from: Remote
  • Vulnerability: Cross Site Scripting
⋅ Categories: Drupal 6.x, Drupal 7.x

Pages

Subscribe with RSS Subscribe to RSS - Deprecated - Security advisories for contributed projects