Fedora 13 : drupal-6.22-1.fc13 (2011-7546)

Advisory ID: DRUPAL-SA-CORE-2011-001 - Project: Drupal core 1 - Version: 6.x, 7.x - Date: 2011-May-25 - Security risk: Critical 2 - Exploitable from: Remote - Vulnerability: Access bypass, Cross Site Scripting -------- DESCRIPTION Note that Tenable Network Security has extracted the preceding...

CVE-2009-4369

Cross-site scripting XSS vulnerability in the Contact module modules/contact/contact.admin.inc or modules/contact/contact.module in Drupal Core 5.x before 5.21 and 6.x before 6.15 allows remote authenticated users with "administer site-wide contact form" permissions to inject arbitrary web script...

CVE-2009-4370

Cross-site scripting XSS vulnerability in the Menu module modules/menu/menu.admin.inc in Drupal Core 6.x before 6.15 allows remote authenticated users with permissions to create new menus to inject arbitrary web script or HTML via a menu description, which is not properly handled in the menu...