Cross site scripting

Cross-site scripting XSS vulnerability in index.php in the Link module 5.x-2.5 for Drupal 5.10 allows remote authenticated users, with "administer content types" privileges, to inject arbitrary web script or HTML via the description parameter aka the Help field. NOTE: some of these details are...

CVE-2009-0603

Cross-site scripting XSS vulnerability in index.php in the Link module 5.x-2.5 for Drupal 5.10 allows remote authenticated users, with "administer content types" privileges, to inject arbitrary web script or HTML via the description parameter aka the Help field. NOTE: some of these details are...

Fedora 8 : drupal-5.10-1.fc8 (2008-7467)

Update to 5.10, security fixes: SA-2008-047 http://drupal.org/node/295053 - multiple XSS issues CVE-2008-3740, CVE-2008-3741 - unrestricted upload vulnerability CVE-2008-3742 - multiple CSRF issues CVE-2008-3744 Remember to log in to your site as the admin user before upgrading this package. Afte...