FreeBSD Ports: drupal

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2007-0136

Drupal CVE-2007-0136 affects Drupal before 4.6.11 and 4.7 before 4.7.5, with multiple XSS vulnerabilities exploitable via unspecified parameters in the filter and system modules. The root cause is improper sanitization of arguments rendered via URLs, allowing remote attackers to inject arbitrary ...