Debian Security Advisory DSA 840-1 (drupal)

The remote host is missing an update to drupal announced via advisory DSA 840-1. Stefan Esser of the Hardened-PHP Project reported a serious vulnerability in the third-party XML-RPC library included with some Drupal versions. An attacker could execute arbitrary PHP code on a target site. This...

Debian DSA-840-1 : drupal - missing input sanitising

Stefan Esser of the Hardened-PHP Project reported a serious vulnerability in the third-party XML-RPC library included with some Drupal versions. An attacker could execute arbitrary PHP code on a target site. This update pulls in the latest XML-RPC version from upstream. %NASLMINLEVEL 70300 C...