17322 matches found
CVE-2010-2472
Locale module and dependent contributed modules in Drupal 6.x before 6.16 and 5.x before version 5.22 do not sanitize the display of language codes, native and English language names properly which could allow an attacker to perform a cross-site scripting XSS attack. This vulnerability is mitigat...
CVE-2010-2473
Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user with an open session that was blocked could maintain their session on the Drupal site despite being blocked...
Design/Logic Flaw
Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user with an open session that was blocked could maintain their session on the Drupal site despite being blocked...
CVE-2010-2250
Drupal 5.x and 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL and perform a cross-site scripting attack...
Cross site scripting
Drupal 5.x and 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL and perform a cross-site scripting attack...
CVE-2010-2250
Drupal 5.x and 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL and perform a cross-site scripting attack...
CVE-2010-2473
Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user with an open session that was blocked could maintain their session on the Drupal site despite being blocked...
CVE-2010-2473
Drupal 6.x before 6.16 and Drupal 5.x before 5.22 allow a user with an open session that has been blocked to continue an active session on the site. This is caused by insufficient blocking logic, enabling the blocked user to maintain access despite enforcement of a block. The issue is documented ...
CVE-2010-2472
Locale module and dependent contributed modules in Drupal 6.x before 6.16 and 5.x before version 5.22 do not sanitize the display of language codes, native and English language names properly which could allow an attacker to perform a cross-site scripting XSS attack. This vulnerability is mitigat...
CVE-2010-2472
CVE-2010-2472 affects Drupal 6.x < 6.16 and 5.x
CVE-2010-2250
CVE-2010-2250 affects Drupal 5.x and 6.x up to 6.15/6.16, where a user-supplied value is echoed during site installation, enabling cross-site scripting via a crafted URL. Evidence in multiple sources confirms Drupal-based XSS risk and indicates mitigations exist in later Drupal releases (6.16+; D...
CVE-2010-2250
Drupal 5.x and 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL and perform a cross-site scripting attack...
CVE-2010-2472: Improper Neutralization of Input During Web Page Generation
Locale module and dependent contributed modules in Drupal 6.x before 6.16 and 5.x before version 5.22 do not sanitize the display of language codes, native and English language names properly which could allow an attacker to perform a cross-site scripting XSS attack. This vulnerability is mitigat...
CVE-2010-2473: Improper Input Validation
Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user with an open session that was blocked could maintain their session on the Drupal site despite being blocked...
CVE-2010-2250: Improper Neutralization of Input During Web Page Generation
Drupal 5.x and 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL and perform a cross-site scripting attack...
PT-2019-6546
Name of the Vulnerable Software and Affected Versions Drupal versions 5.x through 5.21 Drupal versions 6.x through 6.15 Description The issue allows a user with an open session that was blocked to maintain their session on the site despite being blocked. This occurs due to improper blocking of...
PT-2019-6545
Name of the Vulnerable Software and Affected Versions Drupal versions 6.x prior to 6.16 Drupal versions 5.x prior to 5.22 Description The Locale module and its dependent contributed modules in Drupal do not properly sanitize the display of language codes, native, and English language names. This...
PT-2019-6539
Name of the Vulnerable Software and Affected Versions Drupal versions 5.x and 6.x before 6.16 Description The issue allows an attacker to perform a cross-site scripting attack by crafting a URL, as a user-supplied value is used in output during site installation. Recommendations For versions 5.x...