Fedora 17 : drupal6-og-2.4-1.fc17 (2012-11479)

Fri Aug 3 2012 Anderson Silva - 2.4-1 - Security update from upstream - Thu May 3 2012 Anderson Silva - 2.3-1 - Security update from upstream Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 16 : drupal6-og-2.4-1.fc16 (2012-11476)

The remote Fedora host is missing a security update involving drupal6-og. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2012-2081

The CVE-2012-2081 issue concerns the Organic Groups (OG) module for Drupal (versions 6.x-2.x prior to 6.x-2.3). The root cause is that the module’s Views integration does not correctly filter information from private groups, allowing remote attackers to access sensitive data. Impact: disclosure o...

CVE-2012-3800

The vulnerability CVE-2012-3800 affects the Organic Groups module for Drupal (6.x-2.x) prior to 6.x-2.4 when used with the Vertical Tabs module. The issue is an XSS in og.js that allows remote authenticated users to inject arbitrary script or HTML via the group title. The Drupal security advisory...

CVE-2012-2721

The CVE-2012-2721 issue affects the Organic Groups module for Drupal 6.x, specifically versions prior to 6.x-2.4. The vulnerability arises because the module’s default views do not properly enforce Drupal core permissions when all users have the 'access content' permission removed, enabling remot...

Fedora 17 : drupal6-og-2.3-1.fc17 (2012-7259)

Upstream security update Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora Update for drupal6-og FEDORA-2012-7293

Check for the Version of drupal6-og OpenVAS Vulnerability Test Fedora Update for drupal6-og FEDORA-2012-7293 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for drupal6-og FEDORA-2012-7293

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : drupal6-og-2.3-1.fc16 (2012-7293)

Upstream security update Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

[SECURITY] Fedora 16 Update: drupal6-og-2.3-1.fc16

Enable users to create and manage their own 'groups'...

SA-CONTRIB-2012-066 - Spaces and Spaces OG - Access Bypass

CVE: CVE-2012-2303 Spaces is an API module intended to make configuration options generally avaliable only at the sitewide level to be configurable and overridden by individual "spaces" on a Drupal site. The spaces and spacesog modules part of the spaces package in some cases do not apply the...

SA-CONTRIB-2011-047 - OG Features access bypass

OG Features provides a mechanism for groups to enable or disable certain bundles of functionality, of features, within the groups they administer. The module is able to turn components on and off within given groups by overriding the access callbacks of every menu item, and checking conditions...

Drupal OG Menu Module XSS Vulnerability

No description provided by source. OG Menu 6.x-2.0 XSS Vulnerability CVE-2010-1747 This disclosure has also been posted at http://madirish.net/?article=467 Description of Vulnerability: - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in P...

SA-CONTRIB-2010-073 - Multiple Vulnerabilities In Multiple Contributed Modules

Versions affected and proposed solutions Simple Gallery for Drupal 6.x This module creates a simple gallery using taxonomy and CCK imagefields. The module is vulnerable to a Cross Site Scripting XSS attack. This can be exploited by users with the ability to add taxonomy terms or tag content...

CVE-2009-4528

The CVE-2009-4528 entry concerns Drupal’s Organic Groups (OG) Vocabulary module, version 6.x before 6.x-1.0. The vulnerability allows remote authenticated group members to bypass access restrictions and to create, modify, or read vocabulary items via unspecified vectors. Affected software: Organi...

CVE-2009-4063

The vulnerability CVE-2009-4063 affects Drupal’s Subgroups for Organic Groups (OG) module for Drupal 5.x. Specifically, versions before 5.x-4.0 and before 5.x-3.4 are vulnerable in OG’s handling of node titles, allowing remote attackers to inject arbitrary script/HTML via node titles (XSS). The a...

SA-CONTRIB-2009-095 - Smartqueue OG - Access Bypass

The Smartqueueog module uses Nodequeue's Smartqueue API to provide a Nodequeue for organic groups which is editable by members of that group or the group's administrators. Users with the "administer nodequeue" permission have the option to batch create subqueues individual instances of a queue fo...

CVE-2009-3786

CVE-2009-3786 affects Drupal’s Organic Groups (OG) Vocabulary module. Vulnerable: OG Vocabulary 5.x before 5.x-1.1 and 6.x before 6.x-1.1. Issue: cross-site scripting via the group title, enabling remote injection of arbitrary web script/HTML. Impact as stated: script execution in user context; n...

SA-CONTRIB-2009-075 - OG Vocabulary 5.x

The Organic Groups Vocabulary module enables an organic group to have a group specific vocabulary. In some specific cases, the module does not sanitize before outputting the group title, resulting in a cross-site scripting XSS vulnerability. Such an attack may lead to a malicious user gaining ful...

CVE-2008-3095

The CVE-2008-3095 entry concerns the Organic Groups (OG) module for Drupal. A cross-site scripting (XSS) vulnerability affects OG 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, allowing remote authenticated users with group owner permissions to inject arbitrary web script or HTML via unspecified ...