4 matches found
Drupal 6.15 Twitter module v 6.x-2.6 clear text Vulnerability
Exploit for unknown platform in category web applications ====================================================================================== Drupal 6.15 Twitter module version 6.x-2.6 clear text credential storage vulnerability...
Fedora 9 : drupal-views-6.x.2.6-1.fc9 (2009-6171)
Advisory ID: DRUPAL-SA-CONTRIB-2009-037 0 Project: Views Versions: 6.x-2.x Date: 2009-June-10 Security risk: Moderately critical Exploitable from: Remote Vulnerability: Cross Site Scripting XSS, Access Bypass -------- DESCRIPTION -------------------------------------------------------- - The...
PT-2009-4529 · Drupal · Drupal Views
Name of the Vulnerable Software and Affected Versions: Drupal Views module versions prior to 6.x-2.6 Description: A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via exposed filters in the Views UI administrative interface and the view nam...
SA-CONTRIB-2009-010 Plus 1 - Cross-site request forgery
The Plus 1 module provides a voting widget for content that records votes using Ajax. The URL for voting is vulnerable to cross-site request forgeries CSRF making it possible for users to unknowingly vote for content. Versions affected Versions of Plus 1 prior to 6.x-2.6 Drupal core is not...