[SECURITY] Fedora 21 Update: drupal7-7.35-1.fc21

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

Updated drupal packages fix security vulnerabilities

Password reset URLs can be forged under certain circumstances, allowing an attacker to gain access to another user's account without knowing the account's password CVE-2015-2559. Under certain circumstances, malicious users can construct a URL that will trick users into being redirected to a 3rd...

MGASA-2015-0121 Updated drupal packages fix security vulnerabilities

Password reset URLs can be forged under certain circumstances, allowing an attacker to gain access to another user's account without knowing the account's password CVE-2015-2559. Under certain circumstances, malicious users can construct a URL that will trick users into being redirected to a 3rd...

Drupal Open Legislation module cross-site scripting vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Open Legislation is one of the open database modules. A cross-site scripting vulnerability exists in the Drupal Open Legislation module, which stems from the program's failure to...

Fedora 20 : drupal7-views-3.10-1.fc20 (2015-2104)

SA-CONTRIB-2015-039 - Views - Multiple vulnerabilities: https://www.drupal.org/node/2424403 - Release notes: https://www.drupal.org/node/2424103 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

[SECURITY] Fedora 22 Update: drupal7-7.35-1.fc22

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 20 Update: drupal7-views-3.10-1.fc20

The views module provides a flexible method for Drupal site designers to control how lists of content nodes are presented. Traditionally, Drupal has hard-coded most of this, particularly in how taxonomy and tracker lists are formatted. This tool is essentially a smart query builder that, given...

[SECURITY] Fedora 21 Update: drupal7-views-3.10-1.fc21

The views module provides a flexible method for Drupal site designers to control how lists of content nodes are presented. Traditionally, Drupal has hard-coded most of this, particularly in how taxonomy and tracker lists are formatted. This tool is essentially a smart query builder that, given...

Multiple Open Redirect Vulnerabilities in Drupal Perfecto Module

Drupal is a developmental CMF Content Management Framework written in the PHP language. Multiple open redirection vulnerabilities exist in the Drupal Perfecto module. Because the program fails to properly check the url, an attacker can exploit the vulnerabilities would be redirected to an...

Multiple Cross-Site Scripting Vulnerabilities in Drupal Site Documentation Module

Drupal is a developmental CMF Content Management Framework written in the PHP language. Multiple cross-site scripting vulnerabilities exist in the Drupal Site Documentation module. Because the application fails to properly filter user-supplied input, an attacker could exploit the vulnerabilities ...

Drupal Password Reset Vulnerability

Drupal is a developmental CMF Content Management Framework written in the PHP language. A security vulnerability exists in Drupal that allows a remote attacker to exploit the vulnerability by using a specially crafted password hash and submitting a password reset URL that can reset the password o...

Drupal Chaos tool suite module access bypass vulnerability

Drupal is a developmental CMF Content Management Framework written in the PHP language. An access bypass vulnerability exists in the Drupal Chaos tool suite module. An attacker could exploit the vulnerability to bypass certain security restrictions and gain unauthorized access...

SQL Servers Unauthorized Commands SQL Injection - Ver2 (CVE-2014-3704)

SQL injection techniques can allow remote attackers to execute SQL commands on SQL servers. SQL injection techniques can be used by attackers to exploit the Drupal vulnerability. Successful exploitation could allow attacker to disclose confidential information, modify or shut down the database or...

Drupal Profile2 Privacy Module Cross-Site Scripting Vulnerability

Drupal is a developmental CMF Content Management Framework written in the PHP language. A cross-site scripting vulnerability exists in the Drupal Profile2 Privacy module. Because the program fails to properly filter user-supplied text, an attacker can exploit the vulnerability to execute arbitrar...

Drupal Core XML-RPC Endpoint xmlrpc.php Internal Entity Expansion Denial of Service - Ver2 (CVE-2014-5265)

A denial of service vulnerability has been reported in Drupal Core. This can cause a very high CPU load and memory exhaustion. A remote unauthenticated attacker can exploit this vulnerability to cause a denial of service on the vulnerable system...

Cross-site scripting vulnerability in Drupal Webform module

Drupal is a developmental CMF Content Management Framework written in the PHP language. A cross-site scripting vulnerability exists in the Drupal Webform module. Because the program fails to properly filter user-supplied text, an attacker can exploit the vulnerability to execute arbitrary script...

Drupal Chaos tool suite module open redirect vulnerability

Drupal is a developmental CMF Content Management Framework written in the PHP language. An open redirection vulnerability exists in the Drupal Chaos tool suite module. An attacker can exploit the vulnerability to be redirected to an attacker-controlled site, which may aid in phishing attacks...

Multiple Cross-Site Scripting Vulnerabilities in Drupal Image Title Module

Drupal is a developmental CMF Content Management Framework written in the PHP language. Multiple cross-site scripting vulnerabilities exist in the Drupal Image Title module. Because the application fails to properly filter user-supplied input, an attacker could exploit the vulnerabilities to...

Multiple cross-site scripting vulnerabilities in Drupal OG tabs module

Drupal is a developmental CMF Content Management Framework written in the PHP language. Multiple cross-site scripting vulnerabilities exist in the Drupal OG tabs module. Because the application fails to properly filter user-supplied input, an attacker could exploit the vulnerabilities to execute...

Multiple Cross-Site Scripting Vulnerabilities in Drupal Webform Module

Drupal is a developmental CMF Content Management Framework written in the PHP language. Multiple cross-site scripting vulnerabilities exist in the Drupal Webform module. Because the application fails to properly filter user-supplied input, an attacker could exploit the vulnerabilities to execute...