CVE-2010-5276

The Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal does not properly handle the $user object in memcacheadmin, which might "lead to a role change not being recognized until the user logs in again."...

Cross site scripting

Cross-site scripting XSS vulnerability in memcacheadmin in the Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Code injection

The Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal does not properly handle the $user object in memcacheadmin, which might "lead to a role change not being recognized until the user logs in again."...

CVE-2010-5276

The issue CVE-2010-5276 affects the Memcache module for Drupal 5.x and 6.x. Specifically, versions 5.x prior to 5.x-1.10 and 6.x prior to 6.x-1.6 mishandle the $user object in memcache_admin, which can cause a user’s role change to not be recognized until the user logs in again. The Drupal SA adv...

CVE-2010-5275

Cross-site scripting XSS vulnerability in memcacheadmin in the Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-5276

The Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal does not properly handle the $user object in memcacheadmin, which might "lead to a role change not being recognized until the user logs in again."...

CVE-2010-5275

CVE-2010-5275 corresponds to an XSS vulnerability in the Memcache Drupal project, specifically the memcache_admin module. Technical details across connected documents show that this affects memcache for Drupal 5.x (before 5.x-1.10) and Drupal 6.x (before 6.x-1.6). The root cause is that memcache_...

PT-2012-1485

Name of the Vulnerable Software and Affected Versions Memcache module versions 5.x before 5.x-1.10 Memcache module versions 6.x before 6.x-1.6 Description A cross-site scripting XSS issue exists in the memcache admin of the Memcache module for Drupal, allowing remote attackers to inject arbitrary...

PT-2012-1486

Name of the Vulnerable Software and Affected Versions Drupal Memcache module versions 5.x before 5.x-1.10 Drupal Memcache module versions 6.x before 6.x-1.6 Description The issue is related to the handling of the $user object in memcache admin, which might lead to a role change not being recogniz...

CVE-2010-5275: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in memcacheadmin in the Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-5276: Undefined Security Weakness

The Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal does not properly handle the $user object in memcacheadmin, which might "lead to a role change not being recognized until the user logs in again."...

SA-CONTRIB-2010-098 - Memcache - Multiple vulnerabilities

The Memcache project provides an alternative cache backend which works with memcached program to speed up high traffic sites. The memcache backend caches the current $user object a little too aggressively, which can lead to a role change not being recognized until the user logs in again. The...

[SECURITY] Fedora 9 Update: lighttpd-1.4.20-6.fc9

Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...

[SECURITY] Fedora 8 Update: lighttpd-1.4.18-6.fc8

Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...

[SECURITY] Fedora 7 Update: lighttpd-1.4.18-3.fc7

Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...

[SECURITY] Fedora 7 Update: lighttpd-1.4.18-1.fc7

Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...